Extracting prog: 9m58.433812617s
Minimizing prog: 55m37.645207557s
Simplifying prog options: 0s
Extracting C: 1m8.460958793s
Simplifying C: 8m9.266450898s
extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$lan78xx-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_connect_ath9k-syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE_V2-ioctl$EVIOCSFF-syz_open_dev$evdev-ioctl$EVIOCGMASK
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240000007050702400000"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x1a, {0x1a, 0x3, '0\x000\x000\x000\x000\x000\x000\x000\x000\x000\x000\x000\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="986fc6c1070de400631a0000001a03300030003000300030003000300030003000300030003000"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00001a0000001a033000300030003000300030000c0000000300000000000000622ba9a3b61245eb51895e4752"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000c40), 0x8002, 0x800)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000c80)={0x1, 0xffffffff, 0x3, 0x0, 0x80000001, 0x200})
syz_usb_control_io$printer(r0, &(0x7f0000000900)={0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="0030160000001603e30473317192dd3ecd4f69c7f223231014290df0b58cc5f5e7583692917f440ea14473e6bc6bb7e8f9f03bd55e18d6dd2447566ae6a79f2715646f29c947c67f405fc0"], &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000ac0)={0x20, 0x0, 0x7d, {0x7b, "33e66c82d80d8af884ca49da16fbe1e304ed5d878209fff4fb70293c0fd176e1e7925d6893c53bf5b32ce9355c94640266ae95bb4497ce0871af52825301e59285e6f1d66faf6907503f3ae23ff2639af54960037ec276cf9b28673da7ca2e1bd1bb9cb2af7d2511163448cd8a89416901318378504b6e646327a1"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x5a}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x8}})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010102000000106d0483c24000010203010902240001010050c90904000e010301010009210a00770122e10d0905810320"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000d40)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000dc0)={0x34, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000e80)={0x0, 0xffffffffffffff36, &(0x7f0000000ec0)="952bb3e006ae9a4c3a"})
r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x3d, 0xf1, 0xfa, 0x10, 0x54c, 0x154, 0xf2e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x0, 0x20, 0x81, "", [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0xed, 0x71, 0xbc, 0xc3}}, {{0x9, 0x4, 0x82, 0x9, 0x0, 0xe, 0x1, 0x0, 0xc0}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
r7 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000000)={0x0, 0x6, 0x9, 0x3, "002014700c1e0902752c000000000000000000935695551340002c00002000"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000010c0), 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000001100)=""/231)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000001200)={0x53, 0xe1, 0x7, {0xff11, 0x7}, {0x4, 0x5}, @ramp={0x2, 0x7ff, {0x7, 0x8, 0xb, 0x8}}})
r9 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0)
ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000001280)={0x0, 0xffffffffffffff36, &(0x7f00000012c0)="952bb3e006ae9a4c3a"})
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac3-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c4b20710200e01"], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac2-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_ep_write-syz_usb_connect-syz_usb_control_io-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_connect$uac2-syz_usb_connect-syz_usb_connect$hid-syz_open_dev$char_usb-syz_usb_control_io$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$rtl8150-write$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async)
syz_usb_connect$uac2(0x1, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfb, &(0x7f00000009c0)=ANY=[@ANYBLOB="fb03bc38bac41bb933572e5402147c074cd5eb746395416004a5fa375404b4acb8574c882e2e4605869045982aefbbbd01e5113547"]}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f0000000a80)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async)
r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x1, 0x1ca, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x99, 0x8, 0x52, 0x20, 0x2dee, 0x4d22, 0xc78b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x2, 0x80, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0xa6, 0x9, 0x2, 0xff, 0xff, 0x30, 0x7, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x837c}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x25, 0xf, 0x5, 0xb4, 0x35, 0xfe, 0x5, [@hid_hid={0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0xb64}}, @uac_control={{0xa, 0x24, 0x1, 0xfff, 0x2b}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x5, 0x4, 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x5, 0x4, [0x5, 0x6, 0x6, 0x9], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x405, 0x2, 0x2, 0x2}]}], [{{0x9, 0x5, 0x6, 0x14, 0x40, 0x32, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4d88}, @generic={0x76, 0x1, "2ed083fd9fa85da44bc1428b952fcaa72c4b5694f3b53942600de0e1fa323f15d40aec47ac42a07f644eb003d54e80aa9347735aac55ec99c09969fd9b4a8a9399939536a3e1a46e85d07a2d99cf1879a19e41036cfe52fe4919905cd12aa8d6de6fd2a578ab8d210f92840f91d380346844fd5c"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x88c66a996a048e12, 0xd3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}, @generic={0x5, 0xb, "deb3de"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xe0, 0x4, 0x0, [@generic={0x77, 0xf, "06d6208a41246b4a71aba3aaefc24dffdb60f4d74917c50a317532fdc4f7d6a9dc132dd235aee5fdb21df999266c7307a50013020cee850d4cb05331d366ea23fc1d76f93d24a21427995c85f7b1d8a0dbeec050b7e4b8f824fb0314584d90003ad67a0c2535604688d2172f0b0425531dc868acf5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xe0, 0x2, 0x44}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x310, 0x2, 0x2, 0x7, 0x40, 0xd1}, 0x27, &(0x7f0000001040)={0x5, 0xf, 0x27, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x5, 0x0, 0x76}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x31, 0xd5, 0x2, 0xa, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1009}}, {0xa5, &(0x7f00000010c0)=@string={0xa5, 0x3, "c175ea9513102b5313a2432b7627394bd4899e0f2754dbbbbd16cdb7d5931fa94fbd39df1cbc5d1e5e5bcc27cc9dac658f873275f730849b687f5285067ff6d88e9f582acfebdce2c4e6803c2d31b6c4eca294f68709a2ff5da1bd7def485da3d80c31af5c70ef838d19811187d5c5fb691d5dc5460aabf8ab2fa084d66a8ff692522bece3de2e211e66d48f1983900be1b595460a5179588789847ed0248b87bfa819"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x414}}, {0x4f, &(0x7f00000011c0)=@string={0x4f, 0x3, "3c386bd165e3d75f9f93c044d34d1c19874af1d2c81adfeef10425e85ef137c8711c672cf8078757530fb1fceee9c1cf43269faad40508e90b1129e62e8b7c8329fcca6089b7d9dfa9ae479d3d"}}, {0x35, &(0x7f0000001240)=@string={0x35, 0x3, "bd82b0cc6ce2097a1d6bf316307c07c2584e333f73c7efeb2899f453fecf195c8fad4495c46a91f149232ead18e637f002076b"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41f}}, {0x61, &(0x7f00000012c0)=@string={0x61, 0x3, "bd37a7b3f27de6a3d32e8a2acc52616773ce22a564635c451edaa7bbbc2a19405f88fa9b8891a8a5033c25c914c522f05c5fb0c7913efb0dc32057f304a50ea54bbf398dbf71ecdf6731ef5c074160c52adfae760a2411dee1437a6bf7d4ca"}}, {0x1c, &(0x7f0000001340)=@string={0x1c, 0x3, "15dbcedd69a8638caed79c988c387d66de665221da3cf31845c9"}}]}) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xcc, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '\aE'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x6a, 0x401, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x40}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x9a, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xf9, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8, 0xe}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x200, 0x3, 0x5, 0x81, 0x40, 0x5}, 0x2c, &(0x7f00000014c0)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x401}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7, 0xf000, 0x5, [0xff0f, 0x3f00, 0xff0000, 0x0, 0x0]}]}, 0x1, [{0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x1801}}]}) (async)
syz_usb_connect$uac2(0x0, 0x86, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x5, 0x70, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xff, 0x14, 0x6}, [@sample_rate={0xb, 0x24, 0xd, 0x1, 0x2, 0x4, [0x1, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x4, 0x8, {0x8, 0x25, 0x1, 0x1, 0x33, 0xff, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x3, 0x2, {0x8, 0x25, 0x1, 0x81, 0x3, 0x6c, 0x8}}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0xb, 0x1, 0x9, 0x8, 0x8}, 0x38, &(0x7f0000000c80)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0xb0, 0x7, 0x9, 0x33, 0xfe}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9c0e7fa160a1fd9cfb6ec1a9602123f3"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "364d721cf8fa7270decce3d9f6ec973f"}]}, 0x1, [{0xdc, &(0x7f0000000cc0)=@string={0xdc, 0x3, "2a53af930dfa35a6adeb6d09a13a4a3ff553afcd2e1ecbaf820663802dcc9536d372bf32d8929157777befa1bd9bf9baba9d2af8a6ab11908cc1d3659f2bb5882ba66e7cfaf0cd373e10bd1f2f373380890de13e9deea7214ce34f2ca48c13c29f6b23b1298eb39c9115d583945ef58fd46a3d7c078c3192daf228cbc6affdc26a027f0cbcf3ca7c74b6b9f0fe1bf670795d0708a155d8ba48ac6abc1cd60b6aaa488625d7210479ed2c5254a67283dba9c7a30be413e61bc391f0c52e503eebb5988047ecf98a655f39eafcd8f71c9e02c00b7d805fa7a274b7"}}]}) (async)
syz_usb_connect(0x5, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xcc, 0xbe, 0x6b, 0x8, 0xbc3, 0x1, 0x792e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0x20, 0x0, "", [{{0x9, 0x4, 0xea, 0xd, 0x0, 0xf5, 0xa6, 0x31, 0x7}}]}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x5c33, 0x4, 0x1, {0x22, 0xe0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xff, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf, 0xb1, 0x6d}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x7e, 0x1, 0x40, 0x8}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0xf, 0x1, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "854c134cdcd3242fcf5778a05e4b5b4c"}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "33862bd67aab7e8995eaeddc676d79ce7656b9e24460c34014e4e836"}}, {0xd3, &(0x7f00000001c0)=@string={0xd3, 0x3, "f570edd06fb578fd854493c94ef3f6a094c8c70374a26b00ba34bb3d3e0e1248d8b937079773b822881e89d1ccfe921c68577b3113c0df450dbbe4c00d64c6636b9613181130aeb1e8cad828d59c93f334e190eddc66e59a6654567ff7e6583a1d88d70625418e284017bde48465060bc2ed5269718924d62746468be31db14541cdf39bf44367d971693d3c402dd9781617561819ac3b1f6fba745b5edef8ba8003a6380bb03dc28d9801d2591b18dd72c9f35c2ab7b8ca685a77da45ea2357a0883567352309ed01960c99129ab0307a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0x5e, &(0x7f0000000340)=@string={0x5e, 0x3, "3cb840bb6e721d4b5e00e260e8da444ac7482e8086168e4812f374fc1ad3f3b2b3b45117fd190847e4180ff5097759e89b589673fea56f21b18a86bcd4fba381154d669c176bc0f2de33fcdf4b322be1c2910ac9c6f79ca482ddcb02"}}, {0xa, &(0x7f00000003c0)=@string={0xa, 0x3, "5e3dc40b45431e50"}}, {0xdd, &(0x7f0000000400)=@string={0xdd, 0x3, "7bcc2836097e0c7e2aaa7c0bb56b8b834a9584d6190b81cdcddcd029728d453127f9f1273ecaf1253d18d508eac9e809583e4d79f0e03fa3fec31a792108315ec87a1356bdaaf475204d9115357448e2c4b377ac9d6120f3276a9bd90a2e69ca86d82aafe9f34dc488474b0eb2b166463edc93d3d2ab6aad40cfeb249194ef26074aa7a220e48ad3032cfb704d7a2e074cdf26f912ef07e2caa003f163fbbbb74f54fa771a647dd1ac9c22feeefc5f5da96f8873228846d10f5f143770d495071470fbddd7fac6fb0cc41f643112e1d2747c53aac61b1947a30c2b"}}]})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async, rerun: 32)
syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x20, 0x6, 0x75, {0x75, 0x21, "d8b0dba98cbe471548bde1447275253a6ccaa869ee6c79b5b4f6a64fa6065f653d2df20b7c72842c796cddede0227a91fafe54d23d8c246ae1d285426f47d1e3a649826f350b3afff801f8bcb1d0f7910853bad657d06ae2475b70b6bfa35f87ddecf26b2c4176c254bd0d8651fc43fd004c71"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f0000000640)={0x0, 0x22, 0x4, {[@local=@item_012={0x1, 0x2, 0xa, 'l'}, @main=@item_012={0x1, 0x0, 0xa, 's'}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5e, 0xa, 0x1, {0x22, 0x4be}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x17, 0x6d, "6a4879b89e0f294520fb77db23601d6f16162d4db5f81d0bb6dd5dd9e58b86fe31b7c48865e6ec7ba3fcc618df9fcb4c6f4cfe93527d5f2f2e302fce0c66c81e7ae40f2d8325ab72187511e8f3e56428024f118907b33a70192416af8d90f03898b6edd7869044c843f7d2bb87"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000800)={0x20, 0x1, 0xa3, "33366a64650edcc2ec6b825c02d40417b7d24f75bfa272d17ee9f003622504df8694b59b17cdcc0ac2c8ef585653d55c0ad4ad81972ea8a653a1b4d510fca444ca68be94634af5ced3e8b7035db1af888497073c365f75634dbfeaa1b7c2c38590ace1b3936f2ebe96086cbfd3bf3d37d3c689181dd27fd464fc97394415ca7e37a2f51e7cb997d864f873595cca482a987c1dbf265600301d6d8a9750e551c9e8f6ef"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x7}}) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect(0x5, 0x35, &(0x7f0000001580)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r4) (async)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000001600)={0x2c, &(0x7f0000001640)={0x0, 0xd, 0x1, "e5"}, 0x0, 0x0, 0x0, 0x0})
write$char_usb(r3, &(0x7f0000001680)="75de", 0x2) (async, rerun: 64)
syz_usb_disconnect(0xffffffffffffffff) (rerun: 64)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$rtl8150-syz_usb_control_io$uac3-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_open_dev$evdev-syz_usb_control_io$lan78xx
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x7, 0x10, 0xf9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "86945b490608"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x9, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x51, 0x22}, [@mdlm={0x15, 0x24, 0x12, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x59, 0xb1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x1, 0xf5}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x2, 0xf, 0xfa, 0x8, 0x46}, 0x2a, &(0x7f0000000340)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xc5, "8024830c93aa13fc7c3ffab8cade4c3f"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0xb, 0xd, 0x200}]}, 0x7, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}, {0xc4, &(0x7f0000000440)=@string={0xc4, 0x3, "d84bf013b11d7a5ab9b1deb751cf50683fddcd69993a420a13a26e25f51fe62f2b672475bb28265a88594e1b012a152b5df642c655b2fdd994b743fabe0049fa9748197d8413290f244a59d90826b55ece0311867d6ed277b8fab3047b8e2116ff2089e2e35b761db56499b94731c015a4c90848a90a4a55073021f1f04153ccd3fd599c28b48478c8e2f4481e97764ebec5be7075f4b86ba16d21b7de796e65dbdb808411ce1c3c148b06c1966a1b5604b4bbe5b4bbe10b11c9bba2ba9561a3302c"}}, {0x32, &(0x7f0000000540)=@string={0x32, 0x3, "f61a1a531f916ceb98261b168358641e34bb75c5c237b9d88082544574a285188a85e7d404e657065f6cfe95412f35ea"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0xb8, &(0x7f0000000600)=@string={0xb8, 0x3, "a54c9568ce3ebd6f0c6916814cc501df8e182ccd3ee4b446ce5ff11a20704dbd3c435d00c782c27a19af41079d7414b3cc95e9b12fe5ebd5d1d8760d68bd30cf637d3acc194495a4449e5136d7b4a1fa363483112adb4424f12a2e5d8dc8bd139dce39c72c3b25e73e43aebfd4d559b3f361c3cbe705ceb1288f15e2d3f1577091b3b08916168d3b3da3d6516675acd54a0b121e6937a59a89440babc23b19b94ff419818b938d37cc961054fdb6d8cf8bbc98644011"}}]}) (async)
r1 = syz_usb_connect(0x5, 0x248, &(0x7f0000000080)=ANY=[@ANYBLOB="120150024b31d110da0b23d7aed50102030109023602010902a0080904a3c10fffffff0109050e02"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000740)={0x14, &(0x7f0000000780)={0x0, 0x31, 0xea, {0xea, 0x11, "23e9c8947fea84206548639f1a8664492230d83628efec7bff3df9b4f49e65257a357128543808063ea0a417c87aa5aa2a6af50e9b044fd58bedb2ba797e834a873fe04fdd8d9d0f1fc44cb4248881667f52765c0f2075a76422dacae84aea93f808f818febf65b8b65126e42d7245fb69abf9d048d4abeaedf2cb0f0f633b9494e9b2a6458d6469dd0cc961d2101927ac35af38d8c328572b16fe6c27809aa1a90ecdbc998f4de2393f6b95ba12c3f6afa32a91272b863f087b6b5c4d205ad321e30300d49b4b2328651cccaa244087927931094375a3be4ce974da81602c2570de9353f40581cd"}}, &(0x7f0000000880)={0x0, 0x3, 0x49, @string={0x49, 0x3, "39da9c1bf81a6e028cb7bed11fea2e6c9dbc16247339661f4954f54fd99164fd08fa0253d5833f5306a1c4f452394d7dd7a1ade11a027a0d7652159f1edd044e2f0b60c849e857"}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000940)={0x0, 0x7, 0xcc, "d0e757aa6c2a9d7944af6c9c81d8cc1298b4eee44fcaba95c00fea64033d63abdd806cf08c592bd15192efa3cc79957b9ca34da6cd94faacddc0a7168e3cdc43f900b87925145fb394b4f538c9639f6713922a371ed9ecc8bd97329a59f9878a084f84b6a9409c1e90a583023b6d831b881ab9866d34dcc29056814a0236459d5e28765f69c988fa6e599479a25e8022cc611a8fd654e0a55fc80d2f4aaad3d9c377a834025747f5d54ea3d0550c3501855fd9a5b9e1b5ccae025c2de76f56cd3bfa050e6e2700fec2f8d563"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "b74d"}, &(0x7f0000000b00)})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3e, 0x208604)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64)
write$char_usb(r5, &(0x7f0000000c80)='0', 0xfe64)
r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r6) (async)
syz_usb_disconnect(r3)
r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x201, 0x0, 0xc2, 0xae, 0x8, 0x7c}, 0x4f, &(0x7f0000000e00)={0x5, 0xf, 0x4f, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x8b, 0x0, 0x4, 0xf00, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0x1ef00, 0x9, [0x3f00, 0xff3f30, 0x30, 0xff0000, 0x3fcf, 0xc0cf]}, @ssp_cap={0xc, 0x10, 0xa, 0xe9, 0x0, 0x9, 0xf000, 0xf87a}, @wireless={0xb, 0x10, 0x1, 0x2, 0x100, 0x4c, 0x4, 0x1ca9, 0x2}]}, 0x8, [{0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="1613dd730303f84d06b90baba3a3245d320f72091398a7d916"]}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xc04}}, {0x0, 0x0}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x3c01}}, {0x0, 0x0}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x425}}]}) (async, rerun: 32)
syz_usb_disconnect(r7) (async, rerun: 32)
syz_usb_disconnect(r6)
syz_usb_connect(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f"], 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xffffffffffffffd7, &(0x7f0000001040)=ANY=[]) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001080)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x6b, {0x1a}}}, 0x0)
syz_open_dev$evdev(&(0x7f0000001100), 0xfff, 0x301400)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-ioctl$HIDIOCGUSAGE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x5c, {0x5c, 0xd, "fca97c8d6d2fa4e865dcd1ba506f8e58c478d04ef14cf766858afc4e82f59dea20957e98866dfafbbbb4548ea086d8b5699e94cdd17de6ead3e44bc95b9fd411849d3fd5844ddfb80462132b13cf35288a9a1128d9d26d1fc9db"}}, &(0x7f0000000100)={0x0, 0x3, 0x55, @string={0x55, 0x3, "1b785378e17ea60c029ef11de64f9a67aa33648d38c92e731ef12adae5171de00f89ea4f7a96a255e1e94deb6050e7758c7aba4320b6bb0b6410eb4ee8338fd6bf4805b10bb9ebabcbe5ef47191758b479ad36"}}, &(0x7f0000000180)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x3, 0x5, 0x8001, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7d, 0x9, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x8}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x300ed6c6ebeeb197, 0x0, 0x5, "bf9f4a7f", "2590a561"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x1, 0x6, 0x4, 0x9, 0x7, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0xc, 0xe2, "e89def7451305e81f2d594cf68c3de04e5c5f346d7128c2bda7d54cc4e6ec8bce7399c4b1d1c807178084204812bc00f6245f024ca648ac868ff4289039e6062c120a82fb9550e45310277cee2771797941837728bcad973baec623d8492c7945b3607a9aec7d3482ce58496c6bff9c79ce2211d95209084ffe9b746b96d4e6d6dd8a01c14fa4665e8aa6f0550293a3440b670afe96d5d262bda5dea45e1c1fd7b08cdbdb8bfece323bdc294b3fadb90a347ddcf78ea8efbfa67da85572aa255efb440a45e480252c65559eb11e18aa1c2386deb7b374b7e939f31398d792bbad3ad"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xa0, 0x2}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xe7}, &(0x7f0000000500)={0x40, 0xb, 0x2, 'sf'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x157}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2ea1"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40025b0c, &(0x7f0000000000)={0x400001, 0x200, 0xffffffff, 0xc, 0x9, 0x7f779019})
program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7, 12, 30, 32, 14, 12, 3, 30, 29, 30, 9, 29, 30, 19, 16, 10, 30, 11, 4, 11, 11, 9, 5, 4, 10, 30, 29, 16, 30]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x7b, 0xfe, 0x51, 0x8, 0x7ca, 0xb800, 0x1a86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x87, 0xe0, 0x8, "", [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x2d9, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0xb1, 0x2, 0x52, 0x10, 0x1822, 0x1, 0x24d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c7, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xe7, 0xc, 0x9, 0x3b, 0x78, 0xe4, 0x0, [@uac_as, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "6569c1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8e4, 0x17, 0x1e}, {0x6, 0x24, 0x1a, 0x49}, [@obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x0, 0x24, 0x14, 0x2, 0x74a}, @mbim={0x0, 0x24, 0x1b, 0xe00, 0xf, 0x4, 0x87, 0x8, 0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0xdf, 0x7, 0xf9}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0xe, 0x4, [@generic={0x3a, 0x5, "f37fbf7bf3f092f2ba2d78ac1ff0113ca74a7e34f597ea88cb28abcc7c3b292d1a037e8a00286c55fd16a9f22e4d8e98f44dd68cb11b66d4"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x2, 0x2, 0x9}}, {{0x9, 0x5, 0x2, 0xd, 0x200, 0x5, 0x7, 0x9b, [@generic={0xd0, 0x23, "86f9b9b3a51c11fb0077157bb4ab90eb0841859080cecf7293bbde9905af92a63d5822a7e6137186196a295eee343aa3352616c7fee24eb431865ef3f956798896addfd8d86a607230692072d915a636f8559a70ab52f5b825ad34067e561c6496d4c0d95d0c2e3aa1a7b165e308c08ed5b693920a9fc96e1ea974e1150ab30acec60255ade7d16c103183b8206ecc329fd3dbd7a92c21708ddd67b4b2b6599eca5c0cda257c2b81767d699f662b66ef16cd2ef620384979e84001b651ab9f407855c18ad30ed5cd98bf93add8cd"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x73, 0xf8, 0x81}}, {{0x9, 0x5, 0xd, 0x14, 0x200, 0x2, 0x5, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x10, 0x1, 0x6, [@generic={0x16, 0xa, "eca1b036492ef3021cf8aa4de5953387e836dacd"}, @generic={0x40, 0x23, "eefb36302890d98f0b1b4fe4dcb69821ee827bb5fe0fae4613bb7695d359d50f9ff4292a74950a3705c935f42b18734c96bbcec328627dda2eb1902fe0a6"}]}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x277a49d549a9c8cb, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x80a}}, {0xab, &(0x7f0000000300)=@lang_id={0x0, 0x3, 0xf0ff}}]})
syz_usb_ep_write(r0, 0x5, 0xf0, &(0x7f0000000100)="f6b199d2259cd6bb7a359c89bc2e2c35e6523bff8234f08468e2771faf26cdee3a9c9c0dba2736694d7e26d92618f509652da22d2c8035a842140060359308afe484bcd17972d2acd2ec81d534042391f352ac943e92252db49eb9f2b4eac66d85d7f258e7d0ca29ea31f3fddfd1b1f7622802ec7c4032112d5045249fe1678843fba35c8ee54f7dc6244615ba10405882bfbedfebd36dcca2dda3e56e9bb90ad6262270a92f00c35d514da7feaf7877456d9879039dd4816287c8326b4737839e484d02377634ef26ee6fe12ab090b8e3211e7f2deac7710ea0ecd7444e8aac1028f75e055f474c50fc3984c35b31f4")
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x1f, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000180)="6173b2983a")
executing program 1:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002fa4759084a1223404a230102030109021200010806d4cf400709048c0800c2be"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xffe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xd, 0xb, {0xa, 0x25, 0x25, 0x2, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async, rerun: 64)
r2 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) (async, rerun: 64)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x0, 0x21, 0xfb, {0xfb, 0xc, "9cdab80151ab1ec87a842c9061c26cabc719ccfe75d6701eae20249684c74e95ad307e0a66a93cd2ebe42d7beb7c835f8aee28f5ad1af84118b64a041b10982ddaee749a7e9f81a61711c63f00759a9b1948ebed2df067eb67d6025ddd33968480ec60d9e93513c1ae09f52b31e0a3f63793b4a1a0e2b41d7370c65ee8d78b966963fdf043b6053f7339c43d56d28216736e7080d04e48266ccdf00f2d006bda6a97a9646ca2e1ba39e75900be0befdd58daf47f5400f4a2e920ab4448d5142c879a219226f4030975f3c9dc6b7bb36f421c88551fc322740aea2fa087c1b0b14cf968e2989a2d2ebab4cadb2f545b035d3f74ebb660f7cde5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "0ac90d5d"}}, &(0x7f0000000300)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x6, "04857e91"}, @main=@item_012={0x1, 0x0, 0xb, "b6"}, @local=@item_4={0x3, 0x2, 0x2, "17de0806"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0x2, "174043e0"}, @local=@item_4={0x3, 0x2, 0x4, "c17eece0"}, @main=@item_012={0x1, 0x0, 0xb, "02"}, @local=@item_012={0x2, 0x2, 0x0, "c338"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0xb, 0x1, {0x22, 0x579}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0x12, 0x21, "db23e0af99b2f9a942e035f6b414660dfec8fccc331f018312e1541c40b9926c11"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xc0, "ef8ffe1c5571ed2f34d95db9b8a006150870feb65e6ab3903f76074818158ae8811c5c6689eb62d3b5366eaafe9b2d8eedffee6ae44f38fd1e84ed7d74f959413845269fd04f6634fcc1745d4d6375459de82619d239b5089f8962a9401707120818b92c9dd3718d2508819aef77412dfc4838a7d15e7f01bb1a3410fed8fc7b0aa842ac22e479eb2c9cad6379e433559d550cdbbf5539fc04546499b67bd71cb45f24ed97bfe1eeda2f8392fd1c698f7d03fe07ea6f213373a42f59e94d2fe4"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x3}}) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0xb7, 0x2, 0x3, 0x1, 0x0, 0x62, {0x9, 0x21, 0x6, 0x7d, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xd6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xd, 0x8, 0xf9}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x7, 0xfa, 0xff, 0x8}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0xe8, 0x896b}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3cf4}}, {0x42, &(0x7f0000000140)=@string={0x42, 0x3, "157dd82043acd05cc5a7e0580ca6de40a6f8a224087f865a8d29dbc28d879fb58ff6cdeaab1f5b30a3206a5ad9a2afac52893a662df45a0d2dfebeade7629b1e"}}]})
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000200)={0x0, 0x1, 0x51, {0x51, 0x3, "09b04d1df711e9fb4f64a6c35886b7a5b51b95671534cd9d9d1d0760847b70ecf06e8e88e5e752b59e5bab4cee6cb331d6aac7c889c1d59285566662905a9d1c5c9c43e677e95f789fa1bced6e23e7"}}, &(0x7f0000000280)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "e96e2c76e1efae36d45e65f39c0cf62cce749c5676612388096c1ec860c12a75075af58ebd1efabc833b888979197b8b4f1293348d65d4505f98303f6143b464de40e0f78e9ffc9c32e62a2a1278f417a4ef764483bce3c263ad4aa9a1242841d9dc797e53a59a20caefd9d0e08efde3c306076fce0e82fb3fff2bf1da43dc2a628cfa7b80f0d95403d9"}}, &(0x7f0000000340)={0x0, 0x22, 0x2, {[@main=@item_012={0x0, 0x0, 0xc}, @local]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x68, 0x1, {0x22, 0x6f9}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x12, 0x17, "dc9f1dd1852bf1ea98597951e26712d75cb415beadfbf9"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000004c0)={0x20, 0x1, 0x2a, "41aa8ecd08f5b3928e444e58d4d1722d545ff5c773738eb0119d8cbe06df36f1b4d22cdbdf1b682aaf91"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x9}})
r1 = syz_usb_connect$midi(0x2, 0x8f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x7e, 0x90, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x77, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xd6, 0x40}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xe5, 0x1, [{0x5, 0x4c}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x80, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x8, 0x81, 0x7, {0x11, 0x25, 0x1, 0xd, "c74fb8e460ef185a9273cf8330"}}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x2, 0x26, 0x0, {0xb, 0x25, 0x1, 0x7, "c0087ed12939e5"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xa, 0x4, 0xf, {0x8, 0x25, 0x1, 0x4, "1c6d14ae"}}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x6, 0x64, {0x7, 0x25, 0x1, 0x3, "260e57"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0xf, 0x3, 0x8, 0xff, 0x9}, 0x21, &(0x7f0000000680)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xc2, 0x4, 0x2, 0x0, 0xe64, [0x30, 0xff00ff, 0x0, 0xff3f00]}]}, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x860}}, {0xed, &(0x7f0000000700)=@string={0xed, 0x3, "dc9c727d000c8bc09de455c278fd42e90e812f268ed5bd867be4f25d0805a385584d29d8fb0dd318320ca3086fb3d536e7753a464d4f90eb100bf77fb1ce862e8c9919cda6573fc3798e0e26711c70419230d314702168e4d7dcb14d622e45106f7d3bdd11b7877208f6f0f972112d8dcc8e5aeba2085fa3fc75b15069b62a5b86e10178f6f2ccde8944e133768ffbc4bfedf13e5fb91c07c99641d48fa9ea0dbccc15ff0619ae57efec7f3c73fdc1edda5bf8c3213314e44e4c2126fe3d806a884519cd29228fa0b304e31c06222783c0fc162df4a8ba458219e212720b033c2bc9141b73eb6a0cb2276c"}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x40, 0x31, 0xa5, {0xa5, 0x1, "9deac9c2ea2707673e8772b13b6b9a64e7e8ecb5c9b7c8b6d90d2951d9e44ab1c9e9a0c0ee9ed5ce2209326263b4c39a28fda2664a91784aade40e5420016a2a6a835c11af8c8bb3936302511f73877894c85f9a0229574ae4f9e419101631247d0090e4bd4328e01d4849fddd4e0e2e243719815ece57411d87a715ea162f485c7ca44ed310fc0a6a5817885c65c9aafc2af9deb7a2c3b942157ac154ce21059951a6"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x20, 0x6, 0x27, "d60784ebd791d4dc52e699d0fba465e399cd7ceedf08d0ade29dc7351d1da9673927db57748c1f"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "597bc8"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, '?'}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, '\x00'}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "33e223"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "024fb7"}})
r2 = syz_usb_connect$uac1(0x5, 0xae, &(0x7f0000000c00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0xd9, 0xc0, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xb, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x65, 0xb, 0xb6, 0xfb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x0, 0x80, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x80, 0x1, 0x0, {0x7, 0x25, 0x1, 0x4, 0xb5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x80}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfb, 0x2, 0xfe, 0xc, '^', "e0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x8, 0x2, 0x9, 0xff}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0xb, 0x4c, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ef, 0x4, 0xe1, 0x8, {0x7, 0x25, 0x1, 0x4, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x7, 0x10, 0x7, 0x8, 0xe}, 0x4b, &(0x7f0000000d00)={0x5, 0xf, 0x4b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x3, 0x7fff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0xb3, 0x3db}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x4, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x3, 0x10, 0x7f, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x4, 0xff00, 0x4, [0xff0000, 0xc0, 0x0, 0x3f30, 0xc0]}]}, 0x2, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x240a}}]})
syz_usb_disconnect(r0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7)
write$char_usb(r3, &(0x7f0000000e40)="4785594caad48bbb7921127f550a039e8d0d3761e50441dd8ee49dcd9b67a5cc8cc7b9ba828c8ad02871b4d05b692652e5feab64f2c9a7e2ab2c9c925a25bd1fbb468c116ffab9c7cfca3455f48d7ffc376c06ca45926548dc4f9143005321058bd338e7b3a5d2aba68e72ae3106244e17d485ee6575a4a72e9b3097265151082bc65dd146d391cf", 0x88)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001040)={0x14, &(0x7f0000000f00)={0x40, 0x15, 0xe6, {0xe6, 0x6, "d0774cb0c8cecef2c4038b67bdf0812d013866dbbbf05f7c3b7139f374a956f15a548103efdc6a168f8ecf04c9360e76a1cc0f1598e5bd211f7da11aeed4a577d7d34505afc9e9cca45e3e8ef1530c5af4fd90d49994a06e1cf19678e8d3a0a5710fef083b8bad01ace7439832144221af8fe37a4badb76d52c7fb971a00894fd407c9be6e121be476b34391f96ae928934832fe6afe018a1f56d9f1cd0365ed0be5f289347cdf6af3c1736cf8c8a32ba89f5f3e4691afc5d17b1c3d5f2bfdca8c1c8691fed8e23f4b733ea96fea24a4c91b5347f707490e4b4cc8be38e46c46aace114f"}}, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x1c, &(0x7f0000001080)={0x0, 0x13, 0x3e, "a1e8ef5bfcaee15a791459e8f794eeebff2f787f7b8c04321149c81713b2c66f974d50860dd4b2651ff33ebfd580d9f679785b626a249862771ab2cebe8d"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x4}})
syz_usb_control_io$lan78xx(r1, &(0x7f0000001300)={0x14, &(0x7f00000011c0)={0x60, 0x1, 0xcd, {0xcd, 0x1, "3e897b08d91f9228b240e33a26a4a7af685e2b7cb2d25f2ad87988cbba77a4102f6f4b1136ee4a58a348d8f7a327873903225a27144987f0eb6e42d8d01d1889ae207645e6dad9c92fe30414afb7a4ca5c2e0ada67b2781bc016cc535fa4cab2de9351954e53deb37d22636cda5970ba532c667daecb132df92bfb74f5cc3acf23a3602d9cf44af82cb0028b4ff2d66aa3a92cd55780a96f3659d80258c6e6dff7dc7cdbf8e64e604359eb4d3f713d7c4330cba08018d86af9fd6de9be5854e1467f57aa5cec87eb0e58b4"}}, &(0x7f00000012c0)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "119eacb472505fbf486186608e79c309a4c84dd703f58b8c2012560093bc460c5aaedeea21d31c8c0883"}}}, &(0x7f0000001540)={0x34, &(0x7f0000001340)={0x0, 0x4, 0x9d, "f8434a58869c5c97d4957a25ab9f45c9420b41a264f30e88fe6c8786b9a8142d6c31b48f644677ee4fcf776d8ce8cd0c27cc738816e23f7b9dcccdaded2343c0e562d77152b10284a985bea7ac06e7db0b874ff5114ed559ee03ef8844fd8c4abfe7164f76cd7eacb341e1232f2866484af4620ea426631523083dff383a22a4ea4df2cd3bc53015f09734e4609e208896c819f41567fefd03aaf82524"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001480)={0xc0, 0xa1, 0x4, 0x8000}, &(0x7f00000014c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000001500)={0xc0, 0xa2, 0x2f, "ab9cd84dc966f6a8b44523f2c5fb0e4bc0c42d28d671165574499d91f17d7c381aabf900c4fcb95d6fa0e50809ebee"}})
write$char_usb(r3, &(0x7f0000001580)="541f977cfc55238d0faab0006cd43898bcb5585c7737039cb552990d91a6c273396b1b24d2ceb358c43903edcf0c6a6dc4ad3fdc1d550f199b54bcac8fc5d3145ad68d0243dcd342ebaf772140e2ac1b70527dcd5a4a02eb769f4b9a04f5ff2492943dab4e2d", 0x66)
syz_usb_control_io$uac3(r1, &(0x7f0000001740)={0x14, &(0x7f0000001600)={0x40, 0x23, 0xd8, {0xd8, 0x9, "5d937b52fa13693ce54120c7ad59b1678ac527bbfd1fca44c5a83bff418ea8fbf0494035b42c34525da875aa03b8771edb958b2680ad23db31104a164bfbe199c1d5ff2250add55817deeca8cf3f387b655a40a0e1f6257d14eee5b6646d59fe2ef2bfc4aaa276934a436317118875dbbce207bdb2f9d156495c2cfbffa65079ab83c7bede63c20955d450366a0c66550dedf3bf47f07119d50bec5e153a61070b5df0660bd4bfcba99d96d85821121106e35a988a801baed399646269c7793fde7fac51db98240c738e829bf7e51768e63ae660a29e"}}, &(0x7f0000001700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, &(0x7f0000001a40)={0x44, &(0x7f0000001780)={0x20, 0x14, 0xc1, "2674d80d55d57370cf804b6ddd13d50d9beb61a8cce1b5d0353d96b56badf545c7485503f35daa5ad11c91343a8e0608b3ee0debf11a96ca6136796d00a473ca844fe805296ab4823f3e52848a8522554c30b9a890023605f1e401f4fe5ad71d1333793eb2442b8d23e4a449b4c2f96055de25e3f1e423c958287c66110c161549d2455585f6f0c647e7d52ba99f7a3e4268883d9b14b78830e5937d21518730a554fb761ab85b66a0da4998c185d4bb2e80ed0fb7d5cd4cb5a239e339b66c2721"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001900)={0x20, 0x81, 0x3, "b842d1"}, &(0x7f0000001940)={0x20, 0x82, 0x2, 'dR'}, &(0x7f0000001980)={0x20, 0x83, 0x3, "069d52"}, &(0x7f00000019c0)={0x20, 0x84, 0x4, "f1e52f31"}, &(0x7f0000001a00)={0x20, 0x85, 0x3, "2fa109"}})
syz_usb_control_io(r2, &(0x7f0000001c00)={0x2c, &(0x7f0000001ac0)={0x40, 0xb, 0x7, {0x7, 0x22, "2935a7d0b5"}}, &(0x7f0000001b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000001b40)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x8001}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xff, 0x3, 0x0, 0x5a}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x0, 0x7, 0x0, 0x6}]}}, &(0x7f0000001b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x49, 0x60, 0x8, 0x81, "13259b30", "504813d4"}}, &(0x7f0000001bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x6, 0x1, 0x4, 0x2, 0x6}}}, &(0x7f00000020c0)={0x84, &(0x7f0000001c40)={0x40, 0x37, 0x8b, "832f09b7cb5a0cd8311fe53c3fc6dd257cdc7a301080acfacaca4634a1f2d32105f44fe8d363c94d548137bc9d68f6f04276680485765aff1d1d11f8a305c87bba6f8d70cdb355537055bc4cbfca1a9cb2a575d446ebd27932eeaf595ea69d16c46e2bc9f08a57c514cc773c670df1e7e4eb15986c3fbbbd9170571b52b9d19d1fd54d7876b4def8a8f5e4"}, &(0x7f0000001d00)={0x0, 0xa, 0x1}, &(0x7f0000001d40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001d80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001dc0)={0x20, 0x0, 0x8, {0x400, 0x80, [0xff1e]}}, &(0x7f0000001e00)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000001e40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001e80)={0x40, 0xb, 0x2, "6d95"}, &(0x7f0000001ec0)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000001f00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001f40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001f80)={0x40, 0x19, 0x2, "3b82"}, &(0x7f0000001fc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000002000)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000002040)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000002080)={0x40, 0x21, 0x1, 0x4}})
r4 = syz_open_dev$evdev(&(0x7f0000002180), 0x9, 0x3c1480)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000021c0)={0xff, 0x1c, 0x10, 0xffffffff, "1d28a4144a8bd3be24c3f8989457f8316642df31ab57be5c6c9971048ddf1ab7"})
syz_usb_control_io$printer(r1, &(0x7f0000002300)={0x14, &(0x7f0000002200)={0x20, 0x22, 0x20, {0x20, 0x3, "a8b150036c480d8cee7b0101c54207e1249ae0775bf23eddeb94c174bfa0"}}, &(0x7f0000002240)={0x0, 0x3, 0x91, @string={0x91, 0x3, "857ae3b8a858d6f0129b32d1a3184c12041392b94ec5e3327a7583638f6617486d2c85ca36456dde85365d5021094d963cdb862cc7cff64009d5e5d9452a00c325bebc92dc424913f5c1bdce62a2fb0f1c4d4f9a7f54eda775a4edeb0cdd1d5d41262b37fc0e0a054ab4b021791623405574ec1ecf4ad0283ea74024c86f933559bb1b22b3c388ff6d37f51e99ef69"}}}, &(0x7f0000002500)={0x34, &(0x7f0000002340)={0x40, 0xe, 0x5, "f055a5c7b1"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000002400)={0x20, 0x0, 0x5d, {0x5b, "bf75b0f7e5fe8de340cc95309034b3e2145bc46289b37af6e39f2dfb350fe9792cab75b989e7bf47e79aaa36bf804e0f3b691b669ef26e66dbbd6e7a2b83f11ca16c328b92c66ff00bf76b7b5ff544d22fa6eadd7ca55fd538a85c"}}, &(0x7f0000002480)={0x20, 0x1, 0x1, 0xc}, &(0x7f00000024c0)={0x20, 0x0, 0x1, 0xfd}})
r5 = syz_open_dev$hiddev(&(0x7f0000002540), 0x2, 0x161800)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000002580)={0x3, 0xfffffffd, 0x2})
syz_usb_control_io(r1, &(0x7f0000002800)={0x2c, &(0x7f00000025c0)={0x0, 0x2, 0x7c, {0x7c, 0x0, "0b62eb56ab7e65dd3b22876306703b3272c36a90d652b8d7ddb07be673a343b93f5e3b8630acf69d6351d8920b4bf15d998b7f38478885c205c155db6cc06d87780582f7f4673b9aed2e05fb963ead0eefce1bfd5ad4bf8e7c47885d8425d3bb59464df553a3ec74379807a311b77632a453254343e4dc577104"}}, &(0x7f0000002680)={0x0, 0x3, 0x27, @string={0x27, 0x3, "427f892a3d9e2eb4a0a68ab7ba3d41d919f8e5138f750ec5dac52f2b24261d682272394aad"}}, &(0x7f00000026c0)={0x0, 0xf, 0x93, {0x5, 0xf, 0x93, 0x3, [@generic={0x78, 0x10, 0x3, "7a8cdadd4e5001d1fd42ef198e7b2d87b6de8cb266f197a9a448018828871138cc2d9726569f539130821e45005ae9477608b22337f4077e300818c0426683f587613d70c1aab5d92c8f82033f307df0dfab8f14d1d19da9533540a283edcbacfe74f822aa598330489b23a9010c9a63c15d3cc059"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0xf, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xd5, 0x0, 0x2, 0xf00f, 0xd}]}}, &(0x7f0000002780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x9, 0x2, "7ca6b06e", "c09874da"}}, &(0x7f00000027c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x6, 0x7, 0x4, 0x10, 0x5}}}, &(0x7f0000002c40)={0x84, &(0x7f0000002840)={0x20, 0x0, 0x2a, "bc1429b20a5d35b7a3ca7f60ed615ef3fec9105cff691abad6125d3a7afea8b7a8a2753a756e5088c371"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0xfc}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002900)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000002940)={0x20, 0x0, 0x4, {0xc0, 0x36}}, &(0x7f0000002980)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000029c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000002a00)={0x40, 0xb, 0x2, "8658"}, &(0x7f0000002a40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000002a80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002ac0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002b00)={0x40, 0x19, 0x2, '{y'}, &(0x7f0000002b40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002b80)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000002bc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002c00)={0x40, 0x21, 0x1, 0x6e}})
r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000002d00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x64, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x6, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x1, 0x5}}]}}}]}}]}}, &(0x7f0000003180)={0xa, &(0x7f0000002d40)={0xa, 0x6, 0x110, 0x0, 0x5, 0xb2, 0xff, 0x1}, 0x1c, &(0x7f0000002d80)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc3, "511fb7eedab3001015f4478b991a2164"}, @ptm_cap={0x3}]}, 0x7, [{0x62, &(0x7f0000002dc0)=@string={0x62, 0x3, "a2c6e85649f7cce0cffde432fcc6a8bedc8d793b084a164fd8466d40e5080d0c130b309ecac7508028a4d6cf4528d96878f03670dd5f624586d3ec10a33398d0345c85acfc7f579ad6b64ef2c9a56debac7364c99ea26b42fe1c3d58600c8100"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x1801}}, {0x79, &(0x7f0000002e80)=@string={0x79, 0x3, "0d14bc06cef6e39dbd5b89a25283d977143e65d8e3d987a96f3f8a1f20855b3df59e8248b69143360e4242aac3a531d8ef3de7d163c81cc7b899927aecd656dea56cdb1f6404353dccbe174373e3357e9e7ab6d53b953ddd3b65e3d7a7fdbc4c99ae6dbf8ac433d831a849bd6c98f2db1f5f9821efa3f8"}}, {0xaa, &(0x7f0000002f00)=@string={0xaa, 0x3, "ee9a5a8f6f7ce29ee1531b4e4cd1f12e202fb3621e52d9d8f54f132c8e64732e4f3e7a6aea0dbc1e24ddce793111cdb691d5b4e10981084268b369723d3d7bdb99fb48e05f3446d65aa0de206a4d862e468270f3f563194520ceeb4b4fb7981b7f41c788607c4bff9a4046eaaac5cbb749b12a2e60a090a2603cd3ef18e54d12a09198a82ac4756c881ecf8b5e54b7c839ae46e6b24773b0e309554f706952b963bf51458dbb8bda"}}, {0xfc, &(0x7f0000002fc0)=@string={0xfc, 0x3, "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"}}, {0xe, &(0x7f00000030c0)=@string={0xe, 0x3, "72cd40a6da3019c504d71879"}}, {0x4a, &(0x7f0000003100)=@string={0x4a, 0x3, "22ac3e00d1e520f3537208b0ab803539e71c718d98436e58ec595bb7024e1879102073249da2496d0019738d77087ab516cee242fddb237c737541054ada49473a36f18aa8de8243"}}]})
syz_usb_control_io$printer(r6, &(0x7f0000003340)={0x14, &(0x7f0000003200)={0x0, 0x6, 0xd6, {0xd6, 0x4, "3941ea381cce3e916a86e9368a529f0c68ac12b1322d345852c103216170fedf83ec6d0e466cd6b5dc18319687fd806466ac947b1ebf84d2fdce9905c5eed9f029bd9bdc634a1c487979cf1f65679dc5e7ccff17cbca68da848851567627571f782048270f50d093fc1e218346f6a8db6fbada8421fa7d48adea63f69b7b34873a3fd17a38edf96db951a59740a5356d5ffb53b7952f1dbd3903007d24d1a4cf3787c309c185d8c25972e04e64546479656f555acc720ab81a974a22b41298520cbd09290001bf9f39d40701161dd1238b6de705"}}, &(0x7f0000003300)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "518f54b261e73d5a11d005863835fb619b74c20030cce0222dc22ab55bdb2b45981f96eecd04255bc84e"}}}, &(0x7f0000003680)={0x34, &(0x7f0000003380)={0x20, 0x16, 0xae, "2649ad2d6bb8b4ee8f077150af45544cca9add3698a6670452ecbf30e84672644c3679ef5a642b39740ef08a8c9481a8a30fc6fb94bb1c4aedfa8e65dc0b56b7114513b181623ab65a58247c5296afe5d363c2618d0cd9b6fa706b23da9fd508f749897899e25542c7d55a85543e9ccaabb8ff685faa39df4ac1d43270f382027f1ef7d30a9777d7e349478f5367abae51287b4b2e4293765b2e5bd5fb6b5476033308af652631b86972cec93b21"}, &(0x7f0000003440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000034c0)={0x20, 0x0, 0xff, {0xfd, "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"}}, &(0x7f0000003600)={0x20, 0x1, 0x1}, &(0x7f0000003640)={0x20, 0x0, 0x1, 0x3}})
r7 = syz_usb_connect$uac3(0x5, 0x10a, &(0x7f00000036c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x5, 0x20, 0x7f, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x1d, 0x8d3a}, [@selector_unit={0x6, 0x24, 0xc, 0x6, 0x1, "86"}, @feature_unit={0xd, 0x24, 0x7, 0x1, 0x3, [0xe, 0xff]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0xe5, "4314368b16"}, @as_header={0x17, 0x24, 0x1, 0x7f, 0x29, 0x7ff, 0x2, 0x5, 0x1, 0x3, 0x8}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x7, 0x0, "123e3bc7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x9, 0xb, 0xf, 0xb2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xe5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x9, 0x3, {0xa, 0x25, 0x25, 0x1, 0x9, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x400, 0x9, 0x2, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xfa, 0xfd, 0x2, 0xbe}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x59, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x0, 0xba, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd1, 0x4, 0x3, 0xfe, 'H\x002'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x7f, 0x4, {0xa, 0x25, 0x25, 0x5, 0x9, 0x2}}}}}}}}]}}, &(0x7f0000003bc0)={0xa, &(0x7f0000003800)={0xa, 0x6, 0x201, 0x4, 0x0, 0x5, 0x20, 0x10}, 0x4b, &(0x7f0000003840)={0x5, 0xf, 0x4b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf7, 0xc3, 0x5e4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x81, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf7, 0x89}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x5, 0x0, 0x5, [0x3fd1, 0x30, 0xff3fcf, 0xc0, 0x0, 0x0]}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000038c0)=@lang_id={0x4, 0x3, 0x1809}}, {0xd4, &(0x7f0000003900)=@string={0xd4, 0x3, "1b4bb3295936b37f2968a5fbb995f46932afd16e2604f5c6ed9c729b01845d46178a18d8d3e13956cf5c1c2628f0a894bd3f13642436621967dafd248c37ceda3dc0c52ace35a33ce0a11a57eb82eb33aaca13171620ec5371d604b9cd39557234fd45954a6b74b9bbbd3a2224bb0c9fc61ffe678b949b3c726423c2f1346811da521f691c95e390de18eab675d7a1a1593cc54aa0cfa28c538c71b93f3ceaa52b9b96b44e22851d09b0203242dd35a885e1f21f0ede44cc1875a01c772ceb14ab7b9f36fbdab11ae81d99c870e37b258d2a"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x140c}}, {0x39, &(0x7f0000003a40)=@string={0x39, 0x3, "702c9a1e35c742dcbbad12faa4f0d7a4acc1ae4531a255a9c92b469671862b61302c22f856cb8fc79a80c6709a2637b938983cc30261ca"}}, {0x1a, &(0x7f0000003a80)=@string={0x1a, 0x3, "2852e7c2650eedf55a7501658b5085f5dfd13e00fa374974"}}, {0x35, &(0x7f0000003ac0)=@string={0x35, 0x3, "1cf89c9a3b4303616d04204bad018d7196052d2d1a81dd7b207b66b2bbce5b7df8eb3d1316e5cf290dd2b45e036b92c69ff241"}}, {0xa9, &(0x7f0000003b00)=@string={0xa9, 0x3, "7343f9ac6ae7ffeec05f18bbda6fba66d67064a170598225e5a0f683bacf7a659c6d2933b58afdfa9cde814d1b38f327d5bd20325fc2f8878e09735fbeb448f957afbb46d3fbeb3d4ed40478a1cb96d5640823f4f5843e043e6bb5138e90561fd501ea71f3bd1896c8f73723d5178cd7f343bc1b873a14c55861aa9a128a6f2b145c607313176d77ad3d6d39ec7994cb2e71921aec23ebcd1aa61e5ebd40ae84dcc9c3969a64bc"}}]})
syz_usb_connect$uac2(0x0, 0xfa, &(0x7f0000003c40)={{0x12, 0x1, 0x81994ca15791b3c7, 0x0, 0x0, 0x0, 0x10, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0xf7, 0x70, 0xa, {0x8, 0xb, 0x0, 0x1, 0x1, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x2, 0x3b, 0x9}, [@extension_unit={0xb, 0x24, 0x9, 0x3, 0x33d2, 0x4, "9e548bce"}, @processing_unit={0xb, 0x24, 0x8, 0x4, 0x2, [0x0, 0x3, 0x3]}, @processing_unit={0xf, 0x24, 0x8, 0x2, 0x1, [0x1, 0x0, 0x2, 0x0, 0x2]}, @processing_unit={0xd, 0x24, 0x8, 0x2, 0x3, [0x0, 0x1, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1b, 0x7, "56c973b452853afb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x7f68, 0xad, 0xc}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc, 0x1, 0xc0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x27, 0x4f, 0x73, {0x8, 0x25, 0x1, 0x3, 0x0, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x5, 0x0, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x10, 0x4, 0xd5, 0x6, "d3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0xf, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0xfb, 0x0, "435fae97c1c50bac"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x2, 0x9, {0x8, 0x25, 0x1, 0x1, 0x3, 0x6, 0x4}}}}}}}}]}}, &(0x7f0000003e00)={0xa, &(0x7f0000003d40)={0xa, 0x6, 0x310, 0x81, 0xfc, 0x5, 0x10, 0x82}, 0x1a, &(0x7f0000003d80)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x7d, 0x4, 0xfffe, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0xf, 0x1}]}, 0x1, [{0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x418}}]})
syz_usb_control_io$rtl8150(r1, &(0x7f0000003fc0)={0x14, &(0x7f0000003e40)={0x20, 0x21, 0xdf, {0xdf, 0x23, "5d7a601d658ac068fdc2c8fedae1579e67fc38c3083194acb50e65cb0f67d045c870f8efedaf78bd54b11452b67b44a6700db729f1c352d42e0bc3e54bf62cdcd1b098253b5948418d547a426c5b44983114abcd4472cdc95626448997a23c2439bf3bb7aab58e62e9597297905ad7ca56e1a478e7fab805c8225340f16c291c2a159086f0ee8dd44874e152ae74542b809e1f450e7b5fb1ed7243319568c0799f64d6effc63376ce37a010e2c8f774284ae7bfcb7ad1cf9dcf3882a121da468282f42009017983dca65c01ecb4604b84aef2b7dcff163c6394e066f56"}}, &(0x7f0000003f40)={0x0, 0x3, 0x40, @string={0x40, 0x3, "bcf6bb2e3f8ac3cba016f5eed9e7426004cbf3aee14efd03247cfadcb0ab8e1f61a61faa1db9997546a902312da47e5d18773ca4b2a5d1eb57a46c258721"}}}, &(0x7f0000004140)={0x2c, &(0x7f0000004000)={0x20, 0x0, 0x4, "724e7cc9"}, &(0x7f0000004040)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000004080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000040c0), &(0x7f0000004100)={0x40, 0x5, 0x3, "45d021"}})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0xc70)
syz_usb_control_io$uac2(r1, &(0x7f0000004240)={0x14, &(0x7f0000004180)={0x0, 0x33, 0x6b, {0x6b, 0x22, "1ce3cc773df68031a755c7851f833eb751b59333e46f21ce7726f7d26c0f77bcdfd3f722ac5363bcfaa39faef8f2620ade8d5ba3109c0a05f6a1159116ea82e07c832f2a7f8402c9a65c1fd14487694d9360f52672dc34237b58c8f53a7d70dc83894fb922f66c2651"}}, &(0x7f0000004200)={0x0, 0x3, 0x31, @string={0x31, 0x3, "b0265b1ab8cc52193881137b306035b13f273701af81983d4141fecb433098ca635f63b28fd2a68de32761e8ce7354"}}}, &(0x7f0000004500)={0x44, &(0x7f0000004280)={0x0, 0xa, 0x93, "874d18d9fecaab8bc36f9248b6005516c464ce8687470034642c597cc4546d180153dd7d0620f299492ed8ab323d74e48c6615c01bec7a68293d6ca38191a7c0e5ea1cc2b13ee68c303fc8c38de8e80d9b59c34524e48e71cfb27a0b5fb78576b23e6075c30fcd94a12028524837adecfb3893d6ac2f7ba489c13fa8546dc4a302c9830534b216281585772795d0183f3cd1c2"}, &(0x7f0000004340)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000004380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000043c0)={0x20, 0x81, 0x1, "a1"}, &(0x7f0000004400)={0x20, 0x82, 0x1, "18"}, &(0x7f0000004440)={0x20, 0x83, 0x2, '$~'}, &(0x7f0000004480)={0x20, 0x84, 0x1, '\x00'}, &(0x7f00000044c0)={0x20, 0x85, 0x3, "be48c5"}})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000004680)={0x14, &(0x7f0000004580)={0x20, 0x23, 0x91, {0x91, 0x23, "3f964aceead3f5cfc50ca13b8b6f6e93fb9a4b6ed0750dc7de13c71b0d7fac6cc62fb8f6450550f6a296f6b84c74cda9a8cdd9df751b0ed13c4356cdbb0e51fcbe99b70ce319ce57e88a7d43753fbe28f8fa92b94346ff43b4e248f9ced3e84632fd272c1a258f1b8677663a979821c3b3b24c84c3d5656447343aeee29931022b1f68f90d702f0bf749317087b68d"}}, &(0x7f0000004640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004900)={0x44, &(0x7f00000046c0)={0x20, 0xf, 0x43, "0d6ef4f1009c71f1f67156a7335145655d5d62007a592e1014842e4bcd0a0649329f019cc97918fd467272cb0f1d224322736ebe116282220f0423c3e7eb0346f8f0a0"}, &(0x7f0000004740)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000004780)={0x0, 0x8, 0x1, 0x8a}, &(0x7f00000047c0)={0x20, 0x80, 0x1c, {0xdb45, 0x8, 0x4, 0xd, 0x3, 0x2, 0x4, 0x8, 0x8, 0xfff, 0x7fff}}, &(0x7f0000004800)={0x20, 0x85, 0x4, 0xb}, &(0x7f0000004840)={0x20, 0x83, 0x2}, &(0x7f0000004880)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000048c0)={0x20, 0x89, 0x2, 0x1}})
read$hiddev(r5, &(0x7f0000004980)=""/4096, 0x1000)
syz_usb_control_io$uac3(r7, &(0x7f0000005a00)={0x14, &(0x7f0000005980)={0x40, 0xf, 0x17, {0x17, 0x1, "c6e062d94b237d3d45fee57aa608c44ae11fbe10d1"}}, &(0x7f00000059c0)={0x0, 0x3, 0x3, @string={0x3, 0x3, '1'}}}, &(0x7f0000005cc0)={0x44, &(0x7f0000005a40)={0x20, 0x0, 0xae, "fce8481667ec7d411afc0d61a587c046295a6f592adadd947803fe68193c61280e9b498caa99f6d3a16d17596964c98f57838f0d992c9309a62af741c25c82b9e6823c53b383aa75583cd0afe224961da4201cf6909dbef282d758384e51fae737349e0b4947ab318062d982fb0b17e5ae5c50e6a3af283168eb4273354eb65e5c758228a4d31ddf33908870f265fa3a4f99a9a6e3c1eee36521e3d8c3ff055677743d8c9f345cf4e8318ed243ec"}, &(0x7f0000005b00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000005b40)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000005b80)={0x20, 0x81, 0x3, "10a963"}, &(0x7f0000005bc0)={0x20, 0x82, 0x1, "bc"}, &(0x7f0000005c00)={0x20, 0x83, 0x3, "07924e"}, &(0x7f0000005c40)={0x20, 0x84, 0x4, "502b58cb"}, &(0x7f0000005c80)={0x20, 0x85, 0x3, "6a8e66"}})
read$char_usb(r8, &(0x7f0000005d40)=""/4096, 0x1000)
executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7bc20"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x0, 0xb, 0x3, "e251a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902"], 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_connect$uac2(0x0, 0x8c, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xc, 0x20, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5, 0x20, 0xb5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x7, 0x1a, 0x9}, [@mixer_unit={0x5, 0x24, 0x4, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x307, 0xfb, 0x3, 0x2, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x4, 0xb, {0x8, 0x25, 0x1, 0x0, 0x31, 0xa6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x4, 0x8, {0x8, 0x25, 0x1, 0x80, 0xf, 0x5a, 0x7fff}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16])
syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd4, 0x24, 0xe9, 0x40, 0x1de1, 0xc102, 0xf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x5, 0x0, 0x8}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7bc20"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x0, 0xb, 0x3, "e251a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902"], 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) (async)
syz_usb_connect$uac2(0x0, 0x8c, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xc, 0x20, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5, 0x20, 0xb5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x7, 0x1a, 0x9}, [@mixer_unit={0x5, 0x24, 0x4, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x307, 0xfb, 0x3, 0x2, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x4, 0xb, {0x8, 0x25, 0x1, 0x0, 0x31, 0xa6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x4, 0x8, {0x8, 0x25, 0x1, 0x80, 0xf, 0x5a, 0x7fff}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16]) (async)
syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd4, 0x24, 0xe9, 0x40, 0x1de1, 0xc102, 0xf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x5, 0x0, 0x8}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) (async)
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x5, 0x1, '/'}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f0000000180)="1125f1cc")
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f00000001c0)="62014d1f")
syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f0000000200)="fb067a30")
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5401471e4720"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x1, "1e"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x25, "", [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb1, 0x7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x410, 0x1, 0x81, 0x81}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xb, 0x95, 0x9, 0xff, 0x2}, 0x17, &(0x7f00000001c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xb8, 0x6, 0xfffc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x1, 0xfff}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0xc9, &(0x7f0000000280)=@string={0xc9, 0x3, "3da0e5de75bde8733600107ffa95924015112b25c15ea98113d50a960a175bc9c02473f964aeb876f00905130b1e6aaac431fff27884019cdb65358a20da432fa8544b63679ef472d7477a9613e15ee301dfa1bd0390234106fa7681a2b84294fa60bfc35cffb3090702bca4381d9454d56546a78ddfcf1e45452cbe7f7068a92576617975e354d38c5cf1a32ecee9f78f932b55800a1ba5f7c2425dbc5b4209d48bd74f20f5a6c993a9ae48344936611fe4a86570501c790671e7e16ed59c2019557f697c72a0"}}]})
syz_usb_control_io$printer(r0, &(0x7f00000004c0)={0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="40242300000023237e858fb4ebf20fd9803199eabd59a8dc86f40002bad1394127c20d6a98121031ee674c059dffb058913291edf0f1c239"], &(0x7f0000000400)={0x0, 0x3, 0x85, @string={0x85, 0x3, "7f8492861a80d557d65afc6f6ce84bfb5f0983945ea1a44b01ffd622e397e7d40e1a3de4630b6d5014dc90ad375ca9da2812bc6926f8cac32da4f0d24f0120b2ced1cdeb776c9ed22e1eec574ae29869ce93eebab5410418e96d0c6d8aef94fbdca4e28d9b4b0bb875e9a09a54c9233b4efc906cab87ac3b9f27e17b865d0b3f7dfcbd"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000500)={0x0, 0x1, 0x12, "dd4d8755bbb36aead28d7b3e9d26ac8f9011"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0xce, {0xcc, "cda2ddd20e46b0cb1b7a038384b00a8dd0e6fdff2cc201ddee802f62d23ddd9d25307ca42650a3758ff2d1ae912200d1d6fe8691357b80008f8290c6d0090114cc89216da0b501fd15b825484e5beaef1b068ddb4bcfacdbe459f9691859a6efe3300226708d757cce9f4e7d5cafd2bc2dd58c416e3e48d0d3f8cfc0526e0cac9e45a14601f0da4a0284bcc1cffb370dae515c26b510532f268f7f6203a79559ded781318c3bb96d63f9ebe8afae3cfda66f79cc307229774eea7e8c681f81d510edd0084ff9f58ccc4bf437"}}, &(0x7f0000000700)={0x20, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0xf1}})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x31, 0x1, "", "13ae00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb3, 0x5, 0x6, {0x7, 0x25, 0x1, 0x4, 0xa, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x1, 0xad, {0x7, 0x25, 0x1, 0x4, 0x3, 0x1}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x25, "", [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb1, 0x7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x410, 0x1, 0x81, 0x81}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xb, 0x95, 0x9, 0xff, 0x2}, 0x17, &(0x7f00000001c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xb8, 0x6, 0xfffc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x1, 0xfff}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0xc9, &(0x7f0000000280)=@string={0xc9, 0x3, "3da0e5de75bde8733600107ffa95924015112b25c15ea98113d50a960a175bc9c02473f964aeb876f00905130b1e6aaac431fff27884019cdb65358a20da432fa8544b63679ef472d7477a9613e15ee301dfa1bd0390234106fa7681a2b84294fa60bfc35cffb3090702bca4381d9454d56546a78ddfcf1e45452cbe7f7068a92576617975e354d38c5cf1a32ecee9f78f932b55800a1ba5f7c2425dbc5b4209d48bd74f20f5a6c993a9ae48344936611fe4a86570501c790671e7e16ed59c2019557f697c72a0"}}]}) (async)
syz_usb_control_io$printer(r0, &(0x7f00000004c0)={0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="40242300000023237e858fb4ebf20fd9803199eabd59a8dc86f40002bad1394127c20d6a98121031ee674c059dffb058913291edf0f1c239"], &(0x7f0000000400)={0x0, 0x3, 0x85, @string={0x85, 0x3, "7f8492861a80d557d65afc6f6ce84bfb5f0983945ea1a44b01ffd622e397e7d40e1a3de4630b6d5014dc90ad375ca9da2812bc6926f8cac32da4f0d24f0120b2ced1cdeb776c9ed22e1eec574ae29869ce93eebab5410418e96d0c6d8aef94fbdca4e28d9b4b0bb875e9a09a54c9233b4efc906cab87ac3b9f27e17b865d0b3f7dfcbd"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000500)={0x0, 0x1, 0x12, "dd4d8755bbb36aead28d7b3e9d26ac8f9011"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0xce, {0xcc, "cda2ddd20e46b0cb1b7a038384b00a8dd0e6fdff2cc201ddee802f62d23ddd9d25307ca42650a3758ff2d1ae912200d1d6fe8691357b80008f8290c6d0090114cc89216da0b501fd15b825484e5beaef1b068ddb4bcfacdbe459f9691859a6efe3300226708d757cce9f4e7d5cafd2bc2dd58c416e3e48d0d3f8cfc0526e0cac9e45a14601f0da4a0284bcc1cffb370dae515c26b510532f268f7f6203a79559ded781318c3bb96d63f9ebe8afae3cfda66f79cc307229774eea7e8c681f81d510edd0084ff9f58ccc4bf437"}}, &(0x7f0000000700)={0x20, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0xf1}}) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (async)
syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x31, 0x1, "", "13ae00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb3, 0x5, 0x6, {0x7, 0x25, 0x1, 0x4, 0xa, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x1, 0xad, {0x7, 0x25, 0x1, 0x4, 0x3, 0x1}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a", @ANYRES16], 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xb6, 0x34, 0x18, 0x20, 0x525, 0xa4a4, 0xd37e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x6, 0x4, 0xa0, 0xf3, "", [{{0x9, 0x4, 0x84, 0x6, 0x2, 0x2, 0x5, 0xb5, 0x4, [], [{{0x9, 0x5, 0xa, 0x1, 0x10, 0xf8, 0x6c, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x410, 0xe0, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7ff}]}}]}}]}}]}}, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x7, 0x14, {0x14, 0x3e, "78f3bcb5f8fda98e94606537b2a89dd76e78"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0xf, 0xfd, "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"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a00)={0x20, 0x81, 0x2, "f538"}, &(0x7f0000000a40)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000000a80)={0x20, 0x83, 0x2, "759b"}, &(0x7f0000000ac0)={0x20, 0x84, 0x1, "98"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "080228"}})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x20c0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000740)=[0x9, 0x9])
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x20, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000280)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_open_dev$evdev(&(0x7f00000006c0), 0x7ad, 0x8000)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, 0x0, &(0x7f0000000600)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x4, [@generic={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x5d, 0x0, 0x4}, @generic={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7}]}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000640)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000d80)={0x24, &(0x7f0000000bc0)={0x20, 0xa, 0x5d, {0x5d, 0x23, "884bd6521b64fa2578e6c8e81091277967966ad7e68a582c232f6acfadbcb445e304699ea4de416b041411a6cc038e7f4b080711d74794cd2f76980cda97cdd6790b14c49fbd48792c886147c0bcd231f4e0f8710ef3e20021ab30"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000000d00)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "62e77cac"}, @global=@item_012={0x2, 0x1, 0x9, 'hf'}]}}, &(0x7f0000000d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x10, 0x1, {0x22, 0x460}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000dc0)={0x0, 0x17, 0xf4, "77fbf2c27b59a246c5921fc2cc065342f975baa218b1e58baa04026b04169ae782e1b7ded35c182c467e7e04b4e757a2995931c07c57bad791fd099d4de1b086d661e0245c2767fcd10a63310da4a88e6f39dd17d7e215b4ddc8886fe183e31db65de7d214553fa713ef92cae2f2a08d6f7c2f75d5d79572771ccb47f439f1dcf6e66a50a229c218c769081ba0b07c1d694aab00333ca72d6b1c01fb5692ca777402a149bd97e4f708d7bc9ab0b9a84b229be368fab5133f055d33d3c77c23ac4215813ccf6394684c6f735095673db9fed54ccaa0fb7c1c3c7b7d28ea9b60c3fd2c334a9adf9d1b0924b0a50976cf5fffe01718"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000f40)={0x20, 0x1, 0xff, "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"}, &(0x7f0000001080)={0x20, 0x3, 0x1}})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000004c0)={0x20, 0x13, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0x20, 0x17, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x171, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010102040000202505a1a440000102030109025f0101014d5005090400000202060000082406000077ed8f05240008000d240f0102000000030006000e042413"], &(0x7f0000000400)={0x0, 0x0, 0x10f, 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="f0575884c920dbab8ffed151a6fa10247782042769c35ebe9840b2c50a7a4da1", @ANYBLOB="49a78eff72e925d4873b92f8563ef9ccc228df6c7013b299909702cfbb437b5beab2f574ad59fae5b472a7c968a2ec18f4230066f9347e6a1e2b9889362015f4f2dce9da94a02954121ced9c0ed197338540e7f40a15e6885b89166566c4f7ffbac0cf3f2deb471987c21410df410f1f36077cd2fd4b93175ed2c83ffef3df9609342592122152ca2a3e562182246a0e69454a8ae379484ea6a5ac93ecc9358628e3804f27c14443980fd11b0ddefa88fa25092f0fd96579ca22c6a2a8475b41638705c5051831edd66522e4ac37084b878f6c8fb61d1afdcb1c75a277eccc7eb00acb2f87bdeef0a2b8e7438a6656f5350a5620d61968482b6eb1f9413dcf304153aaddf71c249f0c59aa504130256db06f33c80b02529daff9a29e3e59ea33d82450ca76cdc721b636d565fdf5a73632cb6c7ac50eddbb911608e30d1a5746cd598b8f57180ec50df5e8e39f65966454c2eaf16c0e7b52cdcec7bec43e1099c725cdbf85c8469e4fb677caa5c9811044b948ef1c2d74bde22863f4641525f697c9af085b0198a794a26c33974cfea31241f199906928d28a2f9dc6aee5f5e5cfbcc8fb6347ba3b95d70d9ef9e9445c2701f02b44c9fac4e34a9229a1b4ad573e612921ceffc4185e6b0c03aa18ff3ffd317f89bdf21fa065d7895f139376a0eb15e5a0ea97794234f88940ad14cec1082261b7b2fd101c69fcaddb979ab8d9aaa2b883215cc5bfab2ca9f8599e2f67afaf90a730e225717a9aebb1f4be635a8ff01455ba96bc61d787fcdb26271de7b24bca7711f2b8636126aff656554e2bff53a61709c3df2e628b272d5b8f1e7eaf91b84a2797cbd4cf88438a445a89df0be2c25cda91e2028d5fc61efdbd0ad2c1a6913ed33862d7365186320e20246bc3392df548171328308af2cb97512e191a972fa93dd96bb7d32c2ba354ad41f080fb1c863ab9be3aef77ccab9746197a26b6b0d21049cf16c4ac3d7463f0e8ff1cf7401e178ce28287f75b726ab0d3e35ebb33276c621722ea26aa0af78aaf097422c492aa0fbc49dfbbf80b837ea2e0e536a0c81933e51fe7e08c750ae29bf6a589728978f640a92c3a18baba9123b3ffb3d2c75d87d590e272ce5140b4e092efb47595c061d0fcd79c7e98e8fc09eae9fc7fca73d593877d4c2973c8f2a5cef27d7a5234ffe35a1c486a395cac4a833656737d31720c0b9d1385686a2ac060d1596faf664b36d72d79d985bb69c7394f3faacd5e2d2f91fc30fe0578e7f1e3f61270070c9a59180d0cb78428b55656372fb4f30325d2a43f386dffe5ee97fc72a62786c24b9f79adbb10ca08eb1195b26bed8894b50b8b09b63690e9a7e0e09ff476369b57e81fcc3b76e23de4012db864e65c4c8b49c5abeaecbf878fa66bac0ec38f280509abc557594257f52dc14b65bb55fcd3e146787c82a7f17964719dad31040fd46e7bf7f47f855f4e3fc2f896b5b65273bb24f4be63b96e67e9611428d4a0c621a033fcee76786a3ff3ddc46e3e3288df0235d460fc922b5f9df500ce9c6a61ec17c780068dd78897b4aef054342c50451c4c57c92301d31486f426eed995d9f632b737460cde0799916f0f62019f918cbdb171192bcd441ec35629639465631a8e0618f80b242c95cfa42ec18982fac4feba3fbc020dd977e156aadd46beb7e25334306666c88f046d468d2bf04e1e8d1f6f01f146552592ca1c7875c7c81a76b899ebcfd5334ef47aa1873133496efe2e1f71536e8502624fc466e65a2f745fb47a4f9db68311b5a8c102dcb8006994bcddd7f0faadef98e6aebd67ebf60eba0dd1be452719ee0af38a284d80424ddfea33273468e276474e5bba39b4cc4335f6421b4f30ce69424b471d48504003dd448a5aa7f86d021a4968008900e8414528e1f1cc6c8011cd40822ba197b59d470cfea80c7c97ba238d5a3863ddad2390ef49876f83de93f6c785a8f8b5361caf86142a06984c93e72c802484f8c1016288954ef0b114c94e08ad52a92d083af7a20c53426cd417d263c121a914be82de1f1a02a9f65eba23fb17ac1d5b7830c3eef048b5cfd0f24f643fa0fdda569a54654ce9da7601beeccb1a5b234226f54a08b5c9e9d54d1b40d871b4f7393fe4c7163c2b28d7973b58b987f41bda5d544604f3b3bc9d9c72a8b11b6729627a4c080d6a99e8bb0398002d9919aaf07fab1a461688f4d511c1ceea937e9f841c9936feb76e9e16a5c6777406c0a09600578cfba22d070fb85e10adf756e0d778460d8809e2b3e94f6230db94cdbcdefcbc238ba15e74745df9753edd305ca5a78a0cc304f32792dbe6f9e686f0ed1a3021deb4e308eb28f2457c57dcae7c997c57bce38202a07f038c87c5f0ef62b680a004985cf64a83dd736743097cee138ff452be2312e019f56bcc80541555d664039e2b76e326abc9724017210585b2356e627b25375494d66a84bf73a1a29d6ce25806d66614a7ba1f8243f57df088a641845121add50e01e3eae406323e793403e28255f92d35b00e1cae63653bd99140a87b355919852ca0e0ef3f47577881086b770e5bdf3ee095631da50ee1720bf664b431e65d2824063c7071c4b1e8f21ac8566f0add241807163cdbed1acf0a600b074a3fe38b206d07d1b0d30ee1400d02ea60fadc61d8e849df99fcb9b2edb6c9f54ae6868e6267ed00662bb19ef386743feb385c0a08223454a0bfa5b95d661721d03239b9923490c47524febd9d599b473d2afb0d811dd5efc679ef4bf8c5c9e6892963ca94aab3e96eaa13a4b1d70151672f8f78d319f926b8b8f303f9f5f3e8b2e667043ebf3ac6bf1abbbbcfe4f577a52cd0a127be9705e3f89a649ece6bee54c7172871082830959eabf8c39de390a4631aaa26d447ac05af47fcfb1223fd84ffef8bf0d409335a80c0b309552f99c4eb28ea777b041f903c21ae13d66db860e9d1e0fccd617d79c851076855ff197e1bbbaa4465dead2469fef1cdb931048298e1755f71c19d31f6c778245165ffba07dc7ffdc81f2339da36892d491a6d8349b5dffad915e2f943ec395e07fddf7d3fbc984f3052807e05afcd382a852cae8a4f02d080973b144156a611ea61b94ed842f117a3e2881a55fc7703aae2a529f1134b70b2f969bc8258eb071c516b45fe9dc0c30ae9911acb50bb2ebe9a05448fc26a5ecdff7f17a6d22324d8aad6f19d0f594aba1717743cb437138bc8787945abd32dae8488f445af1b05a366c7e49e4bf49cd84c31ad84b23bed155c06a3847d1015f2549cc15b86ab009a3e99e0abaab9fe30eb2b39e033f5226cd154d1187fff55fc3a78c132d98e916cdc441e75908c007f1056fb6951f848eca720c7542abd8e2e49e5e063e332f4b03b87feb0ce92837b2024026ccf59b8cccc9a58d38c0820deb85e6a9152b89299c029c8628796755df7bbf1dab6f72fc3bb2ec6da68e19e8ba0c44530eea1e80081f5368cae680ae7bd72282e1061071df1acf93163625f1f74925c29373c840694439f0552ec33b9929266753545a2d0119c51cb8cff28b00a50bccb6a4342a3fd863ea099ca8d9321a03fbc5f2f893cf97a092a57a18eda7f8c3c72fa5191afd306a275522df0039d4a02e490a8e0ce89f0f14768e09f4fc2badcc1296412ef66c33632fc51290f190d54b55f7fa0f383f08048b0e97839f7ab45f49c02da17e37681a1b9a7beec021e705c97785dfc5a300c369d029528b0a6f5a76215962c7d4b83e2fe5091d5da4f95275fdf4517adc086ed3bbe668daf7ba4c320d8aee765908581bd048425fe489b8b3f668e005121129a438463d6db708442e21e4d2edd3a498185ac467d39c52d4321bc5b1905038d18010dd9cb84ee69f0a635b26c1cabb4d6b1612b7e42ae6c93b265869f73178d54e54cc6499c8bd552af934c9fb08edb0e64db2f7b3189566b98a26ec7cfac108ea26a4a25cf36e19663701aebf647524b1c6f44706399e238e9fdfb7454fcf7b6c0c3e0e96d5acd5acf98c4323aceee8e082bea89e1dd862d7c5822adf4ab52f89d5b1e298e30b326d884574aca748e8fa1faa390506be8fa2baf8ea38f5dbc2c74e7564274f66320779c1bc4c43fce572b39dbe15a5d2aa7e34f2af23320d001f21443e6719cab1bd2607a83b18e6c31a73aef52b8e85bd7b842457f3c36a905801301bf9dbf7b741ad1d26a457096a3264304732dd7d9d63a2a0af44fa48e733f13da906219281175166c97a003b35baa8589faef875b38495f017f07747f41dfd23fe3dcac3fbf4b44fe46c83c7a14eb5baabd048e658c4ade5708ce766943ef0367d03f76b9450d80a3efbc0638bef6ac510797f765f2f76a8e0b97ef79b5ad7b8eb903bfc31a756e0490b7f3024aa2f37c727bd3d0029f7269d6ce8b9a7a8e31dcf4d99da8f171befc2034334cecc32bef40c9ceed135662c050c5d39ee63130d4231d8ddee24bbd5e61a932d20e5a64eaf48d76dbf4c8586ba5b4b5863637ca899d9c371e540cf63e91b66a53cd521c235cf4c6520a9a7353fd7432d61c1a2074e6fefedcf7da935928f6bed863ad3eff03dd0e1c13ed77ce2c9a51a634a5bb6bb419227f3cebd1578740d3878cc4d0e9b5dff74088f0bb2e1a5827f1ef1911123875934a7b11f84767108df63d4563f73d2c78387f25d9455068dbd6bd984e31852d89d047aa980d344317f8eeef3680a0956dbadb01699aa8f2491e39ccd077d6f600e80c27a9d6aab74bc52b17d9fad1687052757ffb0d78a74448e897693c19fd51257f96ec121965aa9afe56bdac0d7d30094194df85cccc44c1ee560d50be76ab645084704db698171fbb5676a138bdffc5c8e04731b35da1e892d13a4e574e5ad1ab8c8c8aa574a3448f6222546a7a22659bac2ea3333d0962f0287145b18da8ec2a8ef2be1e7103c27816beb0c551e6f808a76836e985b2ea4c4a038174fa412e93af093b926b68a9d16d809cc61244ca628c16c38aa810d47aa007b75b528a1213e86a3ee0a8c458982a0863cb20d16b03bd5678849eb9927650462394fda8ec5251f8438ac0ff7efd009dc25e5d075f0b72b58d5cd9d18b3802cac6e3babd7e30f16e003aaba6a5c9be56ca675d5139316c2928dd1f368ca5fd56bdd77da8309dba7e42d5b422593343412641a763dd705eedf5e090ceed8901be8eec84377616c237cf42d20503b89ba715e8b6db9d5bba127ce5a611cdcd36e530a4f7801a3a36e4d7e8a660eb8b864eacca2b1f5d701df56359310f1dd2c13f172e082313d659a84fd86789f5251c18b10e807abb438d4f4283f110e9f4a8ebe1ce5230c944c505c9df1b58c145b135f70eebd535f6eb1baef048f29fe19cf71e38fd3198d658cba879f4fbde2796c464ab21a495ad863c68b2127fe073b89eef61c9fdc84596177f6e42761d40b5504a00a319bbdaca1f24dddb663324b86c52dc81dc434adcc93dcd2f605e5009eb80a5dafa456eeb1f8859619c95bfdad18e40faa8cc4a2ab491396a1573d208f494e94fb5275677ffceaab18adff28275c754ca78ab88096c2238f889bdddc0825f23593e1277805cdfc18cf13fd088137d0be99ee8c50590bd33316c3ce5a630b699154af69935445c7f2def4882f4c368aa1b519ef45d2f0fc803cb0d74906d4c955e1164a7b6df741b1c28784b336dd627b9e5ca40b3db05db9b10cc406a4a239fcd17f8a98bf7b9278104eb937f008d4669bd80c28375c123938d820203f062995b62cc4504fcffe58257ec0798db76f1530dcf239f455adab6d4f8f63268634148c206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)
syz_usb_control_io$uac3(r1, &(0x7f00000008c0)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="00172d000000110f41a560e06a84a1d89f0e00000000080000fd9b89c6b5197c44cc7a51ef3bcfe49d4d2250a473923b08784e3d96c8fb0a84c1bfa7866519e1d76e04e680968b6731bbfe26537a"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x84, 0x1, '\a'}, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x1, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000600)=""/147)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x9, "03db64b5"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x2, 0x0, 0x7b, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @acm={0x4, 0x24, 0x2, 0xa}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x68, 0x9, 0x2, 0x1, 0x5}, @obex={0x5, 0x24, 0x15, 0x5}, @country_functional={0xe, 0x24, 0x7, 0x81, 0x0, [0x5, 0x3d84, 0x1, 0xff]}]}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550d, &(0x7f0000000100)=0x2)
executing program 0:
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b753b5086d049608113a01020301090100008000000000"], 0x0) (async)
syz_usb_connect$uac3(0x1, 0xe4, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000408205b2004000010203010902d200030107a044080b0201012230050904000000010130000a2401002500ff010000112410810500060001a19e9178ea2d763c0a2410080180143e0eca0904010000010230000904010101010230000b2402010904fc8020f2ad0a240202400007ff407c5d44f8f1e0030905010908000004800a2525ffffff7f90396209040200000102300009040201010102300006240201040a0a2402020200070081060e24020107037f0af9feb40276820c240201d30308021359fab60a2402020000000056400905820920001ccd070a252503"], &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x50, 0xf4, 0x1, 0xc, 0x0, 0x8}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x4, [{0x18, &(0x7f0000000300)=@string={0x18, 0x3, "0b148ae421ded1d584e27a8dddd14c0cc6396e704a95"}}, {0xdb, &(0x7f0000000340)=@string={0xdb, 0x3, "c51041c3d5725a5d3ce0bc4b5d68a501c69a7bf8de8b887d7961b3a279f99fe7f5eae2fe39765c20877d5b14a88d980812a4d76f2614a8b9f9275885b357fb46ddccdcd92f1769465bc429455cc5f957c4f160a1e482b779c47c077fdb001be5071b8bb6dbd0b754df20a4784a514947cdd1afb5ba011657c67b7fadcbdbfed3b88ed59fa9ec5f1da69e704adcf42d5f5a24dc29e09e22387bd9559346b557c32aff337e0dcc6b4f5fc29cbdc136e998e5c9646a2cfbc33b1cfa6c13654607a0f09c8d8e69783a3f65ce67fa42ff67719392fd4f2fff796622"}}, {0x71, &(0x7f0000000440)=@string={0x71, 0x3, "5358ada3938d7a5366b02d7ed29b137da15cf7c26db515bb62f358b5235cd38b38abcf00a79d35dbfbac4be62a27b7cb5a8674dd1b3975f27282c163d49b9cec82264ea2e4e04a62ae0a479953333902a6a71a242c9b2e722e9927337e540b3539b4e0df32fb612ca459c650d1fc70"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}]}) (async)
syz_usb_control_io$uac2(r0, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x20, 0xc, 0xba, {0xba, 0x0, "6fd0556c2e5ad69b9a7418cc04f5e469416bfa3afebf5ef7e3d605a6358f240196cf770e91397f57487427f689dc8d44570eef395d032272877b3206c568adf0d5a14e6e77ee7e1c9b609026f9570b94b885ffc1e0c23ddd348a9a5d81020494def96471acec28000bdfc47957b49636fec0aa524626863e2497a2f0d7f76a558e04e00ff1a2639225357175273c89cfe5fc1b4047ef67241a964da9928d78eb43dbfb6688ba9e81e23895c4b84d43a2f69fa3ebb211714a"}}, &(0x7f00000008c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "af09e95de7943646c84de6d7c231595bcf69baa7267bfb243fcd17f7fb629550ab34602f1f893733286459c3ba1162dee9cdeb85254e2dd966a8aa864024fd604e088f2c6c8677b18b069c064f8054ac2f1b10bbc3"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000980)={0x0, 0x12, 0x38, "be4cc49b6f407294891439f440a1bdc46f2c4aa387e42aaf05c398a9b46091aabcd93cf0c1e27f260461bd5b7566c2ba78ecbc52b53055c9"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "c9e30f"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, "eb"}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, "6f9c"}, &(0x7f0000000b00)={0x20, 0x84, 0x4, '0J\bq'}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "3427a1"}}) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x41, &(0x7f0000000780)="16f5bc0b35e3c940045ae98a05d502cee83049d838264b0eae0e0c13a4e3f31184068dccf7fac8752c43ee6e292dae37611e08d15471ed8be10b542020923ca803") (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async)
syz_usb_connect$midi(0x0, 0xbb, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x7f, 0x30, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x9, 0x7, [{0x0, 0x7}, {0xb, 0x3}, {0x8, 0x40}, {0x6, 0xdb}, {0x4, 0xce}, {0x6b, 0x3}, {0x3, 0x2}], 0x39}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0x3, 0xa, [{0x0, 0xfc}, {0x2, 0xe5}, {0x70, 0x6}, {0x1}, {0x6, 0xed}, {0x9, 0x7}, {0x8, 0x3}, {0xf0, 0x80}, {0xfa, 0x9}, {0x40, 0x6}], 0x2}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xc1, 0x8, 0x1, {0xa, 0x25, 0x1, 0x6, "8391283bb529"}}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x4, 0x1, 0xa1, {0x5, 0x25, 0x1, 0x1, "0f"}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x8, 0x13, {0xc, 0x25, 0x1, 0x8, "43df7e958b99f345"}}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0x7, 0x1, {0xe, 0x25, 0x1, 0xa, "0a3655c7de62d8de1199"}}}]}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x8, 0x2, 0x89, 0xff, 0x4}, 0x23, &(0x7f00000006c0)={0x5, 0xf, 0x23, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x2, 0x401}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xe, 0x0, 0xfa, 0xa4, 0x6, 0x7}, @ptm_cap={0x3}]}}) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, &(0x7f0000000f40)=""/188, 0xba) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
write$char_usb(r5, 0x0, 0x0) (async)
read$char_usb(r5, 0x0, 0x0)
syz_usb_disconnect(r4) (async)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_ep_write(r4, 0x5, 0x0, &(0x7f0000001000)) (async)
syz_usb_connect(0x0, 0x3c, &(0x7f0000001040)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904e700010e0100040724010f0c04000905030c4000014007080b71"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000540)={0x0, 0x30, 0xc4, {0xc4, 0x19, "cb00a645eeeae1499a564bc2c82df63d0a1a5a4fa7c5b8bf9b34a21dd9ffea443d0a71cd88770cae4e575cc72cf5c1d204d02bcbde81a34e4d7978b6bee65054f718bfceb3d18bc8cd0a72c48f6fc8abf9347c8dfc88f1f896c04d08a17e7a41945481a6a7bc9da3028132b51cf8c6f430a50c9c643ca4d69f98d6931fb4d07d99ca12e8a2430e786a62729d19b8c4b0fc3c1db83118334bba4a22a90c66c4f3b3df137a361e16e8da64e7093f723c14025100d0118dd9c4c9f944e39501b2758581"}}, &(0x7f00000000c0)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "668ec64c0f972d24bd86dfea5bafe8792c02ec0955e105ec6d721167632527a36eead33026db4c37aa7809cb753a821698901ca27b38d82e5dd66b9d002a64d2fa48cd5692c9995a84f9b7546ab572bcd1303798b18034e4e39e7ca72d5414b67c87345d2f0933777bd5d368fcf668a3d20a82869319e0be134607952e388c2fa9f10ac3986ef22cef5f6117e7d5d122d2f526558e0d170d0aea44fc6e538276582451798c5c3df2bd0b13859edd27611eb582d479458215678b7ea5148d4ca90a5e2d61998f8dd016ca"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x50, "f558e0c4d6618f51982e0304f8a08304c0f60bb409e99344bf05560a4362abd66565ef13016dd5b8ec7854bd87857fb1f3cb3e871d93e21e26a83a6668636156ed1e8c3381936dcc4fd1a4a27f08e5f4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000300)={0x20, 0x81, 0x2, "36e1"}, &(0x7f0000000340)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000000380)={0x20, 0x83, 0x2, "47f4"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, "ce"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "3eb4e7"}})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0)
syz_usb_ep_read(r2, 0x1, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x40, &(0x7f0000000500)="900100"/64)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff0009050d"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x3, "6f27c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000e40)={0x0, 0x30, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000e80)={0x14, &(0x7f0000000ec0)={0x0, 0x2, 0xe1, {0xe1, 0x31, "40e322be2844edbafbb62518c737a919d90bbb51c22ec6655ea554dfd46e4293cef04598e0b018aeb54d572510564dfb2fb5b10cc057c6aeb8335b8cd122fc3d361e2f223279e496d6b87d28343d7747b10e6bdae1a461376598f4850b2fe3bfcc7a9672b2cbe0bc31d7c90bcb166849960e44333f789d210ece2a2c9ea088f392441897a776935fc36e40688f4d2501d80f04d12abe54db5c2479c24f2c3bc3169d08a607e8cf0ac8523ab13dbc90ec89b430851d6304a54aec9d80e6bae016e458712d49b426efea64030bfac87d53f9a49e2de855489a2624665c03ef82"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x1c, &(0x7f0000001040)={0x20, 0x14, 0x7, "a1562d2bcf2bbd"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x2}})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x57, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102882333404f17cf8af439010203010902"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x4c, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff00070582"], 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000480)="b8", 0x1)
syz_usb_control_io$uac3(r0, &(0x7f0000001180)={0x14, &(0x7f0000001100)={0x0, 0xa, 0x37, {0x37, 0x23, "5b45255062a54fcbe427ea90fdb6005bb70ff5fe91851120bcec30b8b57e0c5274f91ca4481fd1ca6a4f885d9e787770d9b7cd0793"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000001400)={0x44, &(0x7f00000011c0)={0x40, 0x11, 0x4f, "ccc9683ba72582bbeb7957290a2b6a46b8e7bb8ba8ffa4a3bdc11d7c2efeed0b0633e26a27b603e51689bb5fb65d7a19874cce45c721299e6b318b9c00091955d3f159923d0b18ebe8ef52032a26b6"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000012c0)={0x20, 0x81, 0x1, "f7"}, &(0x7f0000001300)={0x20, 0x82, 0x1, "1b"}, &(0x7f0000001340)={0x20, 0x83, 0x1, "b7"}, &(0x7f0000001380)={0x20, 0x84, 0x3, "f600a3"}, &(0x7f00000013c0)={0x20, 0x85, 0x3, "f64822"}})
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x2, 0x1b, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00!\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x17, 0x3, 'p.g'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001480)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000014c0)={0x24, &(0x7f0000001500)={0x0, 0x2, 0x10, {0x10, 0x22, "871b679278167ead77a230855ac7"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001540)={0x2c, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r5, 0x0, &(0x7f00000015c0)={0x34, &(0x7f0000001600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r4, 0x0, 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="4008db000000db0441fcd994c6fdb71c595b07f1a335357fc5cafc35c03624825d6c8afc8439b9f442d37699cfd55f1068f01910c9a16b581656be4c3c9c197a89a22751030045e0cf69026c27575596f78e0069a888b74843ff0ff859dd7b395ad6d00979ffadddde18ec4d9af5bb540add1bd5440207a2c3012e28d6842f34d489ad77e8e4374cc4cfc310d342efae1fa5911d224114bcfff07a3f39c0df071e9f1bd60884699c603141266db4332ad2f79ab4e025e91982c84bc17ff5aafbba1137e5828bcd314b54c7a1e3c462c2de39f9189cd51717033cf10d0a5b000000"], &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000d80)=ANY=[@ANYBLOB="401061000000ad405c7b0c9067dbab0359351385ea444d5fd172a9233114cece245d3572aad294a25b09e1a587a048f610e6628c54d951c6c48badcc3c531ebcd3380b1075ba0e8bc56bcd018ea1e8e6d2beedb6088951f048be598d2ac5e945ddc624fd6bc93f1f4f9ce7b58f538b9eab0c135449ce4ebf6aff5b99e4353db4d4f5af92dd7622ad61b39fab672658"], &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "6bc09f"}, &(0x7f0000000c00)={0x20, 0x82, 0x1, 'Q'}, &(0x7f0000000c40)={0x20, 0x83, 0x1, "86"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "7e8d"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "3223aa"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x20, 0x7, 0x2, {0x2}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x19, 0xe2, "ab99a69639dd98b2e67e347b9a36c6f97c1a0d0810c1a290dab78b5a9bb1a41c47fec0b1977c1cfa3a75cb8113f081559683985767bfcb88d669cdd4a53fe8e6112e53b2a3e2f09e35c5a0d0f8647b79a5512d79f4439c1da7dfeff3fe44e308578749d338f7b671cee6b00f287aaed0afb23ef49c982eeffd8590c49a2557858802e817b5ef7b27f84510eb7a133a3da76f5451e73d5044758c5f114b59ca9bc3f328f8d5043552a4b642a5431484d55ea2ef6a81cbe4f105fdfe61595af76dac1550df90ad704c4e9c398d7f0fec72508054d8310683a3683b6f4d86e7342dccc6"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0xa4, 0x3, 0xb9, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x1000, 0x80, 0x5, 0x8}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000800)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000880)={0x20, 0x89, 0x2}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000980), 0x205c, 0x501c00)
r4 = syz_open_dev$evdev(&(0x7f0000000a00), 0x908a, 0x840)
syz_usb_disconnect(r4)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r4, 0x550c, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000c80)={0x4, 0x5, 0xac, 0x4, 0x3, 0xdfb})
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000a80)={0x18, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\b?\x00\x00\x00,'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000b80)={0x0, 0xe8fe7249061de526}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000c40)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000009c0)=0xf08)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x800}, 0x0})
r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x97, 0x19, 0xa5, 0x8, 0x46d, 0x897, 0x5104, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x90, 0x5, "", [{{0x9, 0x4, 0x1e, 0x7, 0x0, 0x94, 0xb7, 0x2d, 0x5}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x3c, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0xc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0xf, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x2, 0x7}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x310, 0xb, 0x5, 0x4, 0x40, 0x80}, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="050f1300020b1001080d00000000000000100b"], 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x427}}]})
syz_usb_control_io$cdc_ncm(r6, &(0x7f00000001c0)={0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0xa, 0xb5, "50e94a6adaedb33f2e3c45a1c5ad665e1ae99ddddc9a9233d3d0c95457119a050ed581be893718a66faa2fb23c19b65bda90abd103c571341aa5eb0a71d96d27fbfee85812f1a3da9a6759c779d07de09a62d0073c0e3c6da69dd5c2be752093e3eb84f1ba30228ca8835dedc61eec206078899b7929107d1940739b7bd991b2c230dea4a0563634014a71b40b9e125c1d8fe953c24ad7462e15e3d28ebcd0687f9eac2205fa2f32918a489cf471e6a966266a12c8"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8000, 0x3, 0x6, 0x7, 0x0, 0x7, 0xb94, 0x7fffffff, 0x8, 0x40de, 0xf001, 0xfffc}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}})
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503"], 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3", @ANYBLOB="8b75"], 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x60202)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = syz_usb_connect(0x3, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x10, 0x23, 0xc7, {0xc7, 0x7, "91cc59b4a9cb50bc62947e613b2ea39c7d221f37bc2b742f2f3143998efc238786e60bd28983a0b656f9baf98408ea3c1a672838a26ccc42e2f3af8098adf508201b415fdce3f3d97ed35ef97a2ebcf55bd2686581dd206d10792cb8f13d24410d3b0c9e9deaf3b2c9b0eded4df9633fd3004dfbe688cb2c0e89a97f47fbf3b4c00425480fc8e07540482933526f229782880a455e4781911a4a55703ffc610831f550268d21739b6dcbedfb73d493f6974f03db7ec380c412b9540aa45caa108e50e1c0fe"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x0, 0x12, 0x92, "ba5a5082b9fb786f567a501a19b30a309498009cb7ec00881d90921c39b46bfcf0b5ba46b87a528b042b765c18bb9c3247a9d9daf5982034d4ea270a69c4239df6630529749414e2681ac72d422e2ad364ab68e5ade9f813da856758520261fa112feb2d782ae02b0b70a8e923289edc7226f1b98a2e8a839ba6dcad5ec7098cf963a5b8bd7254f0b76376646dec946baef7"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "c07f73a19784023403275275579753d46ece252abaa129474a129635dcca4d3bc1aab0cb5c43ec35126e69ad8403ce"}})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e"], 0x0)
syz_usb_ep_read(r2, 0x2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002d20fa710490b4f06"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x3, 0x79, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902670003019120020904000000010100000a240100020a0002010209040100000102000009040101010102000009050109200001a3090725010401080009040200000102000009040201010102000003240102080200090582090004"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB]})
syz_usb_disconnect(r1)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="97361213a3930c56f614bfab0eba64b117b12838bdb95f5cd8a7edd8719720b2b764261b7bf9fe22afabf79f56f89938971392ca0d67e40fce2550ffcec8f69b7a93972080fef496db4f997e4d57cfb2803e466accd27892b437ae856e56726d0ad48a477bc046caefd3a4d6a4fa24d83d562aa05f60b7cb4d844b066a49ace7c70a896dfe3e7ef00073d6dec9bbbb5425e669fb575c1189f59d67224b069a5a6f379f7c6b22b395da3c9f47bd5393e414fe950e99f0a9021de5f35143ce5e9b7482915d35121e02fadc6ef954a853f47665a689dceedf7e986a", @ANYRESOCT, @ANYRES32=r1, @ANYRES64=r1], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x56, 0x6f, 0x66, 0x8, 0x1934, 0x706, 0xc23a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4a, 0x5, 0x20, 0xe, "", [{{0x9, 0x4, 0xae, 0x5, 0x0, 0xfd, 0x43, 0xe7, 0x2}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5dc, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r4], 0x0)
syz_usb_ep_write(r3, 0x81, 0x0, 0x0)
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x1)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x12, 0x1, 0x400, 0x7fff, "1aff37044d0a24372c0d2cf75332623e61f604ac2b5012bcf5106df1d41590b7"})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00303a0822ff03f081774565010000003a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0)
executing program 3:
r0 = syz_open_dev$hidraw(&(0x7f0000000400), 0xc, 0x80080)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x351, 0x1b, 0x37, 0x28, 0x10, 0x5ac, 0x8300, 0x5101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x26, 0x2, 0x30, 0x4, "", [{{0x9, 0x4, 0x7f, 0xc2, 0x0, 0xab, 0xde, 0xe3, 0x4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0xf, 0x0})
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000440))
syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}]}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x2, 0x268724a8d477d462, 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000008c0)=ANY=[@ANYRES16=r1], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000980), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000009c0)={0x0, 0xffffffffffffff36, &(0x7f0000000a00)="952bb3e006ae9a4c3a"})
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000d80)={0x24, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2}]}}, 0x0}, 0x0)
syz_usb_control_io(r4, &(0x7f0000000e00)={0x2c, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0xa3, 0x33, 0xd, 0x20, 0x17ef, 0x721e, 0x21d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x93, 0x70, 0x1, "", [{{0x9, 0x4, 0x75, 0xe8, 0x0, 0x9a, 0x1a, 0x62, 0x6}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}})
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x171802)
ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000a80)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
r6 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x0, 0x0)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000b00)={0x0, 0xffffffffffffff36, &(0x7f0000000b40)="952bb3e006ae9a4c3a"})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f0000000bc0)={0x0, 0x3, 0x7e, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1"}, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r2, 0x81, 0x3, &(0x7f0000000c80)="0041c3")
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000f00)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$evdev(&(0x7f0000000f40), 0x0, 0x0)
read$hiddev(r7, &(0x7f0000000f80)=""/102, 0x18)
syz_open_dev$evdev(&(0x7f0000001000), 0x0, 0x822b01)
executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x4000)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/215)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0)
syz_usb_ep_read(r2, 0x3, 0x0, 0x0)
syz_usb_ep_write(r2, 0x84, 0x4, &(0x7f0000000700)="aa00080c")
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x31, 0x3, "9e07f8"}, 0x0, 0x0, 0x0, 0x0})
executing program 4:
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7ff)
write$char_usb(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x3b, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x7e, 0xae, 0x21, 0x8, 0x2c7c, 0x306, 0xc83f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x3, 0x7, 0x40, 0x10, "", [{{0x9, 0x4, 0x91, 0x2, 0x0, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x1}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x16, 0x0, 0x1000101, "000060ffffffffff201b14700c1e0ac74f000000001600000000000900"}) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002b3555a408205e0f0028e0102030109022400020605104009040e0700ffb39b0609040e09"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0)
syz_usb_disconnect(r2) (async)
syz_usb_ep_read(r2, 0xf, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xcc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x90, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x143f}}, {0x0, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000600), 0x7, 0x20000)
syz_usb_connect$uac3(0x1, 0x124, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x3, 0x1, 0x5, 0x20, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x21, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x44, 0xfffffff7}, [@mixer_unit={0x7, 0x24, 0x5, 0x1, 0x80, "e4b4"}, @processing_unit={0xd, 0x24, 0x9, 0x6, 0x3, [0x2, 0x2]}, @processing_unit={0x19, 0x24, 0x9, 0x6, 0x6, [0x3, 0x1, 0x1, 0x1, 0x1]}, @feature_unit={0xd, 0x24, 0x7, 0x4, 0x5, [0x3, 0xa]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x9, 0x3, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}, @as_header={0x17, 0x24, 0x1, 0x8, 0x8, 0xfff7, 0x1002, 0x0, 0xf7, 0x9d, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc2, 0x8, 0x1, {0xa, 0x25, 0x25, 0xd57f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x51, 0xfb, 0x0, 0x3, 0x5}, @as_header={0x17, 0x24, 0x1, 0x9, 0x3, 0x1, 0x1002, 0x4, 0xe, 0x80, 0xff}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0x1, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf7, 0x4, 0xf8, 0x81, "a3", "e591a3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6a, 0x3, 0x0, 0x85}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x43, 0xe, 0x6, {0xa, 0x25, 0x25, 0x7fffffff, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x3, 0xed, 0x3, 0x8, 0x5}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="9a030bcea5c040b9455f0ad805d37347a59e594483d90221c8fae6525641d44e2ee312b6d0a9f6ac996cb49ed33c2db49c316d65eaa384545f2e9cddc728862d35fd297303735c9b5e081ff137853be5fc1458096fc804d07b12cfa5e3a435d1a8a86c2ee9055c1ad849b07fb7d0c165ee68c14d0ff3659786215952f41339deedad2d330df1da37304e9a90eccb2978788de144f05447239d61"]}, {0x57, &(0x7f00000003c0)=@string={0x57, 0x3, "68e1408e20bfe6a9990571d6dd84fba5975cf13aaa346a602e48920ee3e2782e3f4d057fac8e4d634e2f60c7f60f659469bcf9e8317abcbe82be86786a99f59abad79d3b05763003da9de15a6e9f764faab13eb1b4"}}]})
executing program 2:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x40}, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/26, 0x1a)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0x3, "5cf733"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x46, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="4fd542", @ANYRESDEC=r0, @ANYRES64=r0], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x5c, {0x5c, 0xd, "fca97c8d6d2fa4e865dcd1ba506f8e58c478d04ef14cf766858afc4e82f59dea20957e98866dfafbbbb4548ea086d8b5699e94cdd17de6ead3e44bc95b9fd411849d3fd5844ddfb80462132b13cf35288a9a1128d9d26d1fc9db"}}, &(0x7f0000000100)={0x0, 0x3, 0x55, @string={0x55, 0x3, "1b785378e17ea60c029ef11de64f9a67aa33648d38c92e731ef12adae5171de00f89ea4f7a96a255e1e94deb6050e7758c7aba4320b6bb0b6410eb4ee8338fd6bf4805b10bb9ebabcbe5ef47191758b479ad36"}}, &(0x7f0000000180)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x3, 0x5, 0x8001, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7d, 0x9, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x8}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x300ed6c6ebeeb197, 0x0, 0x5, "bf9f4a7f", "2590a561"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x1, 0x6, 0x4, 0x9, 0x7, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0xc, 0xe2, "e89def7451305e81f2d594cf68c3de04e5c5f346d7128c2bda7d54cc4e6ec8bce7399c4b1d1c807178084204812bc00f6245f024ca648ac868ff4289039e6062c120a82fb9550e45310277cee2771797941837728bcad973baec623d8492c7945b3607a9aec7d3482ce58496c6bff9c79ce2211d95209084ffe9b746b96d4e6d6dd8a01c14fa4665e8aa6f0550293a3440b670afe96d5d262bda5dea45e1c1fd7b08cdbdb8bfece323bdc294b3fadb90a347ddcf78ea8efbfa67da85572aa255efb440a45e480252c65559eb11e18aa1c2386deb7b374b7e939f31398d792bbad3ad"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xa0, 0x2}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xe7}, &(0x7f0000000500)={0x40, 0xb, 0x2, 'sf'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x157}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2ea1"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40025b0c, &(0x7f0000000000)={0x400001, 0x200, 0xffffffff, 0xc, 0x9, 0x7f779019})
executing program 4:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x12ba, 0x74b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x88, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x6cb, 0x73f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0xb0, 0xa, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xa20}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x24, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9f, 0x1f, 0x3}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x4, 0x4, 0x8, 0x20, 0x8}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x46, &(0x7f0000000140)=@string={0x46, 0x3, "622cde1bc6ebe8438c893034aa60dd2dd69907e4294bfc1a9c4aaa74d307bcee8e3a76f97015d01fa8e53142214044bfca938ee7e6985299c4e1bc97241eb1817211357b"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a100750895010930810207c0"], 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002d5071b08c00901024ffa0102030109021200013daea002090405070013fd42fb"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x210, 0x5f, 0xd0, 0x57, 0x10, 0x5c6, 0x9080, 0xdb81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x80, 0x6, "", [{{0x9, 0x4, 0x5, 0x7, 0x0, 0xff, 0x84, 0x4c, 0x9}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="020f"]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)={0x20, 0x16, 0x2, "428acbda65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)={0x20, 0x14, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x7, 0x10, 0xf9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "86945b490608"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x9, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x51, 0x22}, [@mdlm={0x15, 0x24, 0x12, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x59, 0xb1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x1, 0xf5}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x2, 0xf, 0xfa, 0x8, 0x46}, 0x2a, &(0x7f0000000340)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xc5, "8024830c93aa13fc7c3ffab8cade4c3f"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0xb, 0xd, 0x200}]}, 0x7, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}, {0xc4, &(0x7f0000000440)=@string={0xc4, 0x3, "d84bf013b11d7a5ab9b1deb751cf50683fddcd69993a420a13a26e25f51fe62f2b672475bb28265a88594e1b012a152b5df642c655b2fdd994b743fabe0049fa9748197d8413290f244a59d90826b55ece0311867d6ed277b8fab3047b8e2116ff2089e2e35b761db56499b94731c015a4c90848a90a4a55073021f1f04153ccd3fd599c28b48478c8e2f4481e97764ebec5be7075f4b86ba16d21b7de796e65dbdb808411ce1c3c148b06c1966a1b5604b4bbe5b4bbe10b11c9bba2ba9561a3302c"}}, {0x32, &(0x7f0000000540)=@string={0x32, 0x3, "f61a1a531f916ceb98261b168358641e34bb75c5c237b9d88082544574a285188a85e7d404e657065f6cfe95412f35ea"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0xb8, &(0x7f0000000600)=@string={0xb8, 0x3, "a54c9568ce3ebd6f0c6916814cc501df8e182ccd3ee4b446ce5ff11a20704dbd3c435d00c782c27a19af41079d7414b3cc95e9b12fe5ebd5d1d8760d68bd30cf637d3acc194495a4449e5136d7b4a1fa363483112adb4424f12a2e5d8dc8bd139dce39c72c3b25e73e43aebfd4d559b3f361c3cbe705ceb1288f15e2d3f1577091b3b08916168d3b3da3d6516675acd54a0b121e6937a59a89440babc23b19b94ff419818b938d37cc961054fdb6d8cf8bbc98644011"}}]}) (async)
r1 = syz_usb_connect(0x5, 0x248, &(0x7f0000000080)=ANY=[@ANYBLOB="120150024b31d110da0b23d7aed50102030109023602010902a0080904a3c10fffffff0109050e02"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000740)={0x14, &(0x7f0000000780)={0x0, 0x31, 0xea, {0xea, 0x11, "23e9c8947fea84206548639f1a8664492230d83628efec7bff3df9b4f49e65257a357128543808063ea0a417c87aa5aa2a6af50e9b044fd58bedb2ba797e834a873fe04fdd8d9d0f1fc44cb4248881667f52765c0f2075a76422dacae84aea93f808f818febf65b8b65126e42d7245fb69abf9d048d4abeaedf2cb0f0f633b9494e9b2a6458d6469dd0cc961d2101927ac35af38d8c328572b16fe6c27809aa1a90ecdbc998f4de2393f6b95ba12c3f6afa32a91272b863f087b6b5c4d205ad321e30300d49b4b2328651cccaa244087927931094375a3be4ce974da81602c2570de9353f40581cd"}}, &(0x7f0000000880)={0x0, 0x3, 0x49, @string={0x49, 0x3, "39da9c1bf81a6e028cb7bed11fea2e6c9dbc16247339661f4954f54fd99164fd08fa0253d5833f5306a1c4f452394d7dd7a1ade11a027a0d7652159f1edd044e2f0b60c849e857"}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000940)={0x0, 0x7, 0xcc, "d0e757aa6c2a9d7944af6c9c81d8cc1298b4eee44fcaba95c00fea64033d63abdd806cf08c592bd15192efa3cc79957b9ca34da6cd94faacddc0a7168e3cdc43f900b87925145fb394b4f538c9639f6713922a371ed9ecc8bd97329a59f9878a084f84b6a9409c1e90a583023b6d831b881ab9866d34dcc29056814a0236459d5e28765f69c988fa6e599479a25e8022cc611a8fd654e0a55fc80d2f4aaad3d9c377a834025747f5d54ea3d0550c3501855fd9a5b9e1b5ccae025c2de76f56cd3bfa050e6e2700fec2f8d563"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "b74d"}, &(0x7f0000000b00)})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3e, 0x208604)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64)
write$char_usb(r5, &(0x7f0000000c80)='0', 0xfe64)
r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r6) (async)
syz_usb_disconnect(r3)
r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x201, 0x0, 0xc2, 0xae, 0x8, 0x7c}, 0x4f, &(0x7f0000000e00)={0x5, 0xf, 0x4f, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x8b, 0x0, 0x4, 0xf00, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0x1ef00, 0x9, [0x3f00, 0xff3f30, 0x30, 0xff0000, 0x3fcf, 0xc0cf]}, @ssp_cap={0xc, 0x10, 0xa, 0xe9, 0x0, 0x9, 0xf000, 0xf87a}, @wireless={0xb, 0x10, 0x1, 0x2, 0x100, 0x4c, 0x4, 0x1ca9, 0x2}]}, 0x8, [{0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="1613dd730303f84d06b90baba3a3245d320f72091398a7d916"]}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xc04}}, {0x0, 0x0}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x3c01}}, {0x0, 0x0}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x425}}]}) (async, rerun: 32)
syz_usb_disconnect(r7) (async, rerun: 32)
syz_usb_disconnect(r6)
syz_usb_connect(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f"], 0x0) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xffffffffffffffd7, &(0x7f0000001040)=ANY=[]) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001080)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x6b, {0x1a}}}, 0x0)
syz_open_dev$evdev(&(0x7f0000001100), 0xfff, 0x301400)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async)
syz_usb_connect$uac2(0x1, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfb, &(0x7f00000009c0)=ANY=[@ANYBLOB="fb03bc38bac41bb933572e5402147c074cd5eb746395416004a5fa375404b4acb8574c882e2e4605869045982aefbbbd01e5113547"]}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f0000000a80)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async)
r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x1, 0x1ca, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x99, 0x8, 0x52, 0x20, 0x2dee, 0x4d22, 0xc78b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x2, 0x80, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0xa6, 0x9, 0x2, 0xff, 0xff, 0x30, 0x7, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x837c}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x25, 0xf, 0x5, 0xb4, 0x35, 0xfe, 0x5, [@hid_hid={0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0xb64}}, @uac_control={{0xa, 0x24, 0x1, 0xfff, 0x2b}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x5, 0x4, 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x5, 0x4, [0x5, 0x6, 0x6, 0x9], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x405, 0x2, 0x2, 0x2}]}], [{{0x9, 0x5, 0x6, 0x14, 0x40, 0x32, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4d88}, @generic={0x76, 0x1, "2ed083fd9fa85da44bc1428b952fcaa72c4b5694f3b53942600de0e1fa323f15d40aec47ac42a07f644eb003d54e80aa9347735aac55ec99c09969fd9b4a8a9399939536a3e1a46e85d07a2d99cf1879a19e41036cfe52fe4919905cd12aa8d6de6fd2a578ab8d210f92840f91d380346844fd5c"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x88c66a996a048e12, 0xd3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}, @generic={0x5, 0xb, "deb3de"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xe0, 0x4, 0x0, [@generic={0x77, 0xf, "06d6208a41246b4a71aba3aaefc24dffdb60f4d74917c50a317532fdc4f7d6a9dc132dd235aee5fdb21df999266c7307a50013020cee850d4cb05331d366ea23fc1d76f93d24a21427995c85f7b1d8a0dbeec050b7e4b8f824fb0314584d90003ad67a0c2535604688d2172f0b0425531dc868acf5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xe0, 0x2, 0x44}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x310, 0x2, 0x2, 0x7, 0x40, 0xd1}, 0x27, &(0x7f0000001040)={0x5, 0xf, 0x27, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x5, 0x0, 0x76}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x31, 0xd5, 0x2, 0xa, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1009}}, {0xa5, &(0x7f00000010c0)=@string={0xa5, 0x3, "c175ea9513102b5313a2432b7627394bd4899e0f2754dbbbbd16cdb7d5931fa94fbd39df1cbc5d1e5e5bcc27cc9dac658f873275f730849b687f5285067ff6d88e9f582acfebdce2c4e6803c2d31b6c4eca294f68709a2ff5da1bd7def485da3d80c31af5c70ef838d19811187d5c5fb691d5dc5460aabf8ab2fa084d66a8ff692522bece3de2e211e66d48f1983900be1b595460a5179588789847ed0248b87bfa819"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x414}}, {0x4f, &(0x7f00000011c0)=@string={0x4f, 0x3, "3c386bd165e3d75f9f93c044d34d1c19874af1d2c81adfeef10425e85ef137c8711c672cf8078757530fb1fceee9c1cf43269faad40508e90b1129e62e8b7c8329fcca6089b7d9dfa9ae479d3d"}}, {0x35, &(0x7f0000001240)=@string={0x35, 0x3, "bd82b0cc6ce2097a1d6bf316307c07c2584e333f73c7efeb2899f453fecf195c8fad4495c46a91f149232ead18e637f002076b"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41f}}, {0x61, &(0x7f00000012c0)=@string={0x61, 0x3, "bd37a7b3f27de6a3d32e8a2acc52616773ce22a564635c451edaa7bbbc2a19405f88fa9b8891a8a5033c25c914c522f05c5fb0c7913efb0dc32057f304a50ea54bbf398dbf71ecdf6731ef5c074160c52adfae760a2411dee1437a6bf7d4ca"}}, {0x1c, &(0x7f0000001340)=@string={0x1c, 0x3, "15dbcedd69a8638caed79c988c387d66de665221da3cf31845c9"}}]}) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xcc, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '\aE'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x6a, 0x401, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x40}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x9a, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xf9, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8, 0xe}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x200, 0x3, 0x5, 0x81, 0x40, 0x5}, 0x2c, &(0x7f00000014c0)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x401}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7, 0xf000, 0x5, [0xff0f, 0x3f00, 0xff0000, 0x0, 0x0]}]}, 0x1, [{0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x1801}}]}) (async)
syz_usb_connect$uac2(0x0, 0x86, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x5, 0x70, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xff, 0x14, 0x6}, [@sample_rate={0xb, 0x24, 0xd, 0x1, 0x2, 0x4, [0x1, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x4, 0x8, {0x8, 0x25, 0x1, 0x1, 0x33, 0xff, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x3, 0x2, {0x8, 0x25, 0x1, 0x81, 0x3, 0x6c, 0x8}}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0xb, 0x1, 0x9, 0x8, 0x8}, 0x38, &(0x7f0000000c80)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0xb0, 0x7, 0x9, 0x33, 0xfe}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9c0e7fa160a1fd9cfb6ec1a9602123f3"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "364d721cf8fa7270decce3d9f6ec973f"}]}, 0x1, [{0xdc, &(0x7f0000000cc0)=@string={0xdc, 0x3, "2a53af930dfa35a6adeb6d09a13a4a3ff553afcd2e1ecbaf820663802dcc9536d372bf32d8929157777befa1bd9bf9baba9d2af8a6ab11908cc1d3659f2bb5882ba66e7cfaf0cd373e10bd1f2f373380890de13e9deea7214ce34f2ca48c13c29f6b23b1298eb39c9115d583945ef58fd46a3d7c078c3192daf228cbc6affdc26a027f0cbcf3ca7c74b6b9f0fe1bf670795d0708a155d8ba48ac6abc1cd60b6aaa488625d7210479ed2c5254a67283dba9c7a30be413e61bc391f0c52e503eebb5988047ecf98a655f39eafcd8f71c9e02c00b7d805fa7a274b7"}}]}) (async)
syz_usb_connect(0x5, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xcc, 0xbe, 0x6b, 0x8, 0xbc3, 0x1, 0x792e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0x20, 0x0, "", [{{0x9, 0x4, 0xea, 0xd, 0x0, 0xf5, 0xa6, 0x31, 0x7}}]}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x5c33, 0x4, 0x1, {0x22, 0xe0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xff, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf, 0xb1, 0x6d}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x7e, 0x1, 0x40, 0x8}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0xf, 0x1, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "854c134cdcd3242fcf5778a05e4b5b4c"}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "33862bd67aab7e8995eaeddc676d79ce7656b9e24460c34014e4e836"}}, {0xd3, &(0x7f00000001c0)=@string={0xd3, 0x3, "f570edd06fb578fd854493c94ef3f6a094c8c70374a26b00ba34bb3d3e0e1248d8b937079773b822881e89d1ccfe921c68577b3113c0df450dbbe4c00d64c6636b9613181130aeb1e8cad828d59c93f334e190eddc66e59a6654567ff7e6583a1d88d70625418e284017bde48465060bc2ed5269718924d62746468be31db14541cdf39bf44367d971693d3c402dd9781617561819ac3b1f6fba745b5edef8ba8003a6380bb03dc28d9801d2591b18dd72c9f35c2ab7b8ca685a77da45ea2357a0883567352309ed01960c99129ab0307a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0x5e, &(0x7f0000000340)=@string={0x5e, 0x3, "3cb840bb6e721d4b5e00e260e8da444ac7482e8086168e4812f374fc1ad3f3b2b3b45117fd190847e4180ff5097759e89b589673fea56f21b18a86bcd4fba381154d669c176bc0f2de33fcdf4b322be1c2910ac9c6f79ca482ddcb02"}}, {0xa, &(0x7f00000003c0)=@string={0xa, 0x3, "5e3dc40b45431e50"}}, {0xdd, &(0x7f0000000400)=@string={0xdd, 0x3, "7bcc2836097e0c7e2aaa7c0bb56b8b834a9584d6190b81cdcddcd029728d453127f9f1273ecaf1253d18d508eac9e809583e4d79f0e03fa3fec31a792108315ec87a1356bdaaf475204d9115357448e2c4b377ac9d6120f3276a9bd90a2e69ca86d82aafe9f34dc488474b0eb2b166463edc93d3d2ab6aad40cfeb249194ef26074aa7a220e48ad3032cfb704d7a2e074cdf26f912ef07e2caa003f163fbbbb74f54fa771a647dd1ac9c22feeefc5f5da96f8873228846d10f5f143770d495071470fbddd7fac6fb0cc41f643112e1d2747c53aac61b1947a30c2b"}}]})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async, rerun: 32)
syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x20, 0x6, 0x75, {0x75, 0x21, "d8b0dba98cbe471548bde1447275253a6ccaa869ee6c79b5b4f6a64fa6065f653d2df20b7c72842c796cddede0227a91fafe54d23d8c246ae1d285426f47d1e3a649826f350b3afff801f8bcb1d0f7910853bad657d06ae2475b70b6bfa35f87ddecf26b2c4176c254bd0d8651fc43fd004c71"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f0000000640)={0x0, 0x22, 0x4, {[@local=@item_012={0x1, 0x2, 0xa, 'l'}, @main=@item_012={0x1, 0x0, 0xa, 's'}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5e, 0xa, 0x1, {0x22, 0x4be}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x17, 0x6d, "6a4879b89e0f294520fb77db23601d6f16162d4db5f81d0bb6dd5dd9e58b86fe31b7c48865e6ec7ba3fcc618df9fcb4c6f4cfe93527d5f2f2e302fce0c66c81e7ae40f2d8325ab72187511e8f3e56428024f118907b33a70192416af8d90f03898b6edd7869044c843f7d2bb87"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000800)={0x20, 0x1, 0xa3, "33366a64650edcc2ec6b825c02d40417b7d24f75bfa272d17ee9f003622504df8694b59b17cdcc0ac2c8ef585653d55c0ad4ad81972ea8a653a1b4d510fca444ca68be94634af5ced3e8b7035db1af888497073c365f75634dbfeaa1b7c2c38590ace1b3936f2ebe96086cbfd3bf3d37d3c689181dd27fd464fc97394415ca7e37a2f51e7cb997d864f873595cca482a987c1dbf265600301d6d8a9750e551c9e8f6ef"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x7}}) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect(0x5, 0x35, &(0x7f0000001580)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r4) (async)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000001600)={0x2c, &(0x7f0000001640)={0x0, 0xd, 0x1, "e5"}, 0x0, 0x0, 0x0, 0x0})
write$char_usb(r3, &(0x7f0000001680)="75de", 0x2) (async, rerun: 64)
syz_usb_disconnect(0xffffffffffffffff) (rerun: 64)
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c4b20710200e01"], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
executing program 2:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240000007050702400000"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x1a, {0x1a, 0x3, '0\x000\x000\x000\x000\x000\x000\x000\x000\x000\x000\x000\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="986fc6c1070de400631a0000001a03300030003000300030003000300030003000300030003000"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00001a0000001a033000300030003000300030000c0000000300000000000000622ba9a3b61245eb51895e4752"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000c40), 0x8002, 0x800)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000c80)={0x1, 0xffffffff, 0x3, 0x0, 0x80000001, 0x200})
syz_usb_control_io$printer(r0, &(0x7f0000000900)={0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="0030160000001603e30473317192dd3ecd4f69c7f223231014290df0b58cc5f5e7583692917f440ea14473e6bc6bb7e8f9f03bd55e18d6dd2447566ae6a79f2715646f29c947c67f405fc0"], &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000ac0)={0x20, 0x0, 0x7d, {0x7b, "33e66c82d80d8af884ca49da16fbe1e304ed5d878209fff4fb70293c0fd176e1e7925d6893c53bf5b32ce9355c94640266ae95bb4497ce0871af52825301e59285e6f1d66faf6907503f3ae23ff2639af54960037ec276cf9b28673da7ca2e1bd1bb9cb2af7d2511163448cd8a89416901318378504b6e646327a1"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x5a}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x8}})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010102000000106d0483c24000010203010902240001010050c90904000e010301010009210a00770122e10d0905810320"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000d40)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000dc0)={0x34, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000e80)={0x0, 0xffffffffffffff36, &(0x7f0000000ec0)="952bb3e006ae9a4c3a"})
r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x3d, 0xf1, 0xfa, 0x10, 0x54c, 0x154, 0xf2e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x0, 0x20, 0x81, "", [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0xed, 0x71, 0xbc, 0xc3}}, {{0x9, 0x4, 0x82, 0x9, 0x0, 0xe, 0x1, 0x0, 0xc0}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
r7 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000000)={0x0, 0x6, 0x9, 0x3, "002014700c1e0902752c000000000000000000935695551340002c00002000"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000010c0), 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000001100)=""/231)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000001200)={0x53, 0xe1, 0x7, {0xff11, 0x7}, {0x4, 0x5}, @ramp={0x2, 0x7ff, {0x7, 0x8, 0xb, 0x8}}})
r9 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0)
ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000001280)={0x0, 0xffffffffffffff36, &(0x7f00000012c0)="952bb3e006ae9a4c3a"})
program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$lan78xx-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_connect_ath9k-syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect$hid-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE_V2-ioctl$EVIOCSFF-syz_open_dev$evdev-ioctl$EVIOCGMASK
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240000007050702400000"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x1a, {0x1a, 0x3, '0\x000\x000\x000\x000\x000\x000\x000\x000\x000\x000\x000\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="986fc6c1070de400631a0000001a03300030003000300030003000300030003000300030003000"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00001a0000001a033000300030003000300030000c0000000300000000000000622ba9a3b61245eb51895e4752"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000c40), 0x8002, 0x800)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000c80)={0x1, 0xffffffff, 0x3, 0x0, 0x80000001, 0x200})
syz_usb_control_io$printer(r0, &(0x7f0000000900)={0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="0030160000001603e30473317192dd3ecd4f69c7f223231014290df0b58cc5f5e7583692917f440ea14473e6bc6bb7e8f9f03bd55e18d6dd2447566ae6a79f2715646f29c947c67f405fc0"], &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000ac0)={0x20, 0x0, 0x7d, {0x7b, "33e66c82d80d8af884ca49da16fbe1e304ed5d878209fff4fb70293c0fd176e1e7925d6893c53bf5b32ce9355c94640266ae95bb4497ce0871af52825301e59285e6f1d66faf6907503f3ae23ff2639af54960037ec276cf9b28673da7ca2e1bd1bb9cb2af7d2511163448cd8a89416901318378504b6e646327a1"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x5a}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x8}})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010102000000106d0483c24000010203010902240001010050c90904000e010301010009210a00770122e10d0905810320"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000d40)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000dc0)={0x34, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000e80)={0x0, 0xffffffffffffff36, &(0x7f0000000ec0)="952bb3e006ae9a4c3a"})
r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x3d, 0xf1, 0xfa, 0x10, 0x54c, 0x154, 0xf2e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x0, 0x20, 0x81, "", [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0xed, 0x71, 0xbc, 0xc3}}, {{0x9, 0x4, 0x82, 0x9, 0x0, 0xe, 0x1, 0x0, 0xc0}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
r7 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000000)={0x0, 0x6, 0x9, 0x3, "002014700c1e0902752c000000000000000000935695551340002c00002000"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000010c0), 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000001100)=""/231)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000001200)={0x53, 0xe1, 0x7, {0xff11, 0x7}, {0x4, 0x5}, @ramp={0x2, 0x7ff, {0x7, 0x8, 0xb, 0x8}}})
r9 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0)
ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000001280)={0x0, 0xffffffffffffff36, &(0x7f00000012c0)="952bb3e006ae9a4c3a"})
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac3-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c4b20710200e01"], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
single: successfully extracted reproducer
found reproducer with 16 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac3-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c4b20710200e01"], 0x0) (async, rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac3-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac3-syz_usb_control_io$rtl8150-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac3-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x10, 0xe0, 0x45, 0x8, 0x1645, 0x8093, 0x9d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x81, 0x30, 0x5, "", [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd4, 0xe0, 0x54, 0x5}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_connect(0x3, 0xc0b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x3f, 0xc2, 0xfd, 0x8, 0x1690, 0x7588, 0xfd7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf9, 0x3, 0x9, 0x1, 0x80, 0x8, "", [{{0x9, 0x4, 0x94, 0x7, 0xd, 0xff, 0x3e, 0xb3, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3f, 0xd5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0xd6, 0x4d}}, {{0x9, 0x5, 0xc, 0x19, 0x400, 0x4, 0xc5, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xef, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xcfda97eadc23d125, 0xd, 0xfb2c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x59, 0x0, 0x6, [@generic={0xf1, 0x23, "35a362b36982bb8032bccbd4cd4ecf802ff1bb334da05c6ae7d5bbb4d614a678f965e121995b4c538a01f067e7eae28de1e647019ead3ab1290bfd3af244551fb9d2f67db095b744d6a5479399ae343dbede04b9c058e743a3a5ba1359eb262e50449a007a728cbc39e34f182f4b3063740cb5350ed2e630623cdb95494ac739354cc769a37bdd4540a51f0afbf2571997ae5447d2c843107ad0e92063c6c5873530d0526b041dadba6eca217940a904deaf3a505ce7bd29c0114da8d9cfc91df464123bbf65bec7eb226778c2b50a7fd77ed4b0266755d6c983907e8e2854fd5f7a494d376b5dcabe86fdf252d4af"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfe, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xae, 0xa4, [@generic={0xd3, 0x9, "e9c70f19599b0daa5aacabf19dd7016f93d7da4c2da8b6a154216d45076a13fe379febd341b7cc6c5b24833bac88b3696403e294dfb84dd94be9671151500e5d61ea0d3099867c4f3fdfc38b20594b7daab9764d01072f31aa804696cffea75277582d1616a2a2c3c761f156e042e5c63b8f194dd6af4d3ee06c32bb3e909861fd6437fa4853a022d0c7ee1f70b1c97bf9165dbe42b2dbc785978357905b494b0bbacc69585310f672f484f833f5bdc21978aa60aa6321952a9464d55bbbb0add7ded2da8eb6afeee301e5e9b8cbd01ab9"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x43, 0xd3b}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xeb, 0x3, 0x4, [@generic={0xce, 0xa, "a037bbd9cb4e5852eebb981214192ed378c1a45f9995829d0ae035ef901b9494a1de66e83e249b88bf003abbfcd3d12afc8deaf5b136f0e1bd5752f8c8fd9defde996f44e03f71749f6a472ec773d6dd9ceaea09fc3ae6d95544583f5703de4daece1e9f2e32abd82e118f1c359d5278b7d7bcfa29b5c98560c1dfc633182accdc613e2f731410ab18976b009fe32736907fb701f549fcf48a35d880baf19f99dc9632e05802f5a2117ae524a8844949edc2ee126932f139c94f9f187ed241fba23222953ce2bbe20a1767b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xff4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x100}, @generic={0xe7, 0x24, "6b61def40c539585028b4dd883a72b6db53b7ed26e5050366d840d9eb8103bbdc44b36f5ffd42d468eae86f69f258e3d8b9d9657b26d315ebea44b215a348ca7b6eac82a83d755328f7fd20055555e60f9532ddcc9ad941d94315700fecf8c580a0d7e584f6435fe31532aa569bd324b40f43c7e38ae500af7ae4b9c51f91309c8780bbdcd71eab2a5a80c15fca2fbe736c7586047a52065fbc56f834c363ffca47b61622eb537e95d3eee1d35b28d00d8593f5fb6730b9c28affbe2c84a7929356391cdc7876a979e6b90e1f6398de1ca3afecd4c4b74583d521b639b2038b9f5ec5ea7a6"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x80, 0x12}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x80, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0xa, 0x8, 0x9, 0x3a, 0x8f, 0xa4, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4317"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x2, 0xea}, {0x6, 0x24, 0x1a, 0x65, 0x61007305bdbfb6a3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xd, 0x5, 0x6, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x43}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x81, 0x2, [@generic={0xc7, 0x1, "f4e35512d852d1839087ff097ce2b1645c7e0c20dd31324b59784bc059260323efde102f859dc493af8b13bfe953e9ece20a5823ed42151e314c7634c519ef9704bdb742ab4a69ecb36c7b03778c9132a313d0a994240f122568cbf8223bfa1874e031f8ea37de814be9124781c47e424cd2b2828372cd4b2ed799d32839d257be123fd823c8b34483228c98b19bc83dcb9d2a4caf6b23a1ebb96ed4177f0de6f38befa31ba10c933493a449a3e536d660d221c1ac9ac0d0955156e141dbfa4569a9a1240f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x2, 0x6, [@generic={0xa, 0x22, "69aaaaeb20836e25"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x10, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xc012}, @generic={0x84, 0xd, "cd83e8e90822e6eb3a583a64e82e915a36f6aa5d55e4cbe31c9839ee2841e26a7dc0cf711834533224f6703798a81093bbf4bba36104eb963fa7b8ee1c9074f4b3d0b832f68bc0aad124d21a4cc4d45828168327563fd5475c35e4ae553e9022f019b11af2ed8e7625b252fae9f8b972d3c2321f5fa401ef8e437e0be9bcca6a3bec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0xd2, [@generic={0x55, 0x7, "66c0176558d3182e59813bc4ecde33161b134b234097826fe9f017aded276d08e20989519120cb702bcb57dc81548fecd6d5880cbadccb6dfdd12f7cd041f341148536a40fc4b4b043282eb225443bf7e6e240"}, @generic={0xb6, 0x8, "33350e2ea1aaf30c4e07045ded8789676dece2f6580a7279fd8fe69cfc3076adff8d95d271ee1358dfad79394d5049e1f8b1ac12311b39a028368837cec3091b389892c5709e54c56069a26084ea2067eaec40742adf361a7b9fbb00a970dee074606be7ffd7114321dfa0802227c37370dc9924deca0a89f14c2d675e9c64d5ab26eed739bfb1924715c037d7a21bfce23235330fd8517657cfb1125c44b4b66c9fd14c6bb7f4c6e60a63ca6da57e4fea1b6db8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe8, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xf9cc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x8a, 0x1, 0x200, 0x40, 0x32, 0x9, [@generic={0xdc, 0x21, "ed9d6995f6fe5dbb16429d9ff7447568671aaa7a9ac39d2886bc7926f4338ff19603ee650664122128f3842ca909890f94b55474c2f6c90e43404778c2e40e72da341ed2922bc78dfb2aeaa625eec63992a8ab964456e640a504e9ef1b98d6fb3d53f853e36bde70954e8e9a1c33ee1e92591913b66b455c32c90e4e7bc50277a9452b88f53473237366df424612fac588d53ac1c37ba075e19dcc5e988312a25f86744c5160e7b6e755e4e6b81a191825a683a4eb658451189db9e99949ae168035b59799cce2ee1d323c39b6f9732a278f983a86a85c92eeb6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf57}]}}]}}, {{0x9, 0x4, 0x36, 0x8, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x7c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xc}, @generic={0xf3, 0x23, "dd1b1d13bb6289860afb9aec276ae26a48d69dfb00dddc8c0b177b09317063d1a459c2ae22a7abd34fd29f8defdfc4d1077d5250bffc36b4cdcbaf1ee461e56ac10d0aebbb1fa2d64e0cd1e03effbaeca6139261e0c5cfa86b298678fe5c0cfc3c42dcc437ab3cf61e18a7893fc3d855b2974e632db715c2a73c0e7c3da26ad2a6646c309f06f7126f8fa3154ecd3ec8b6baf277ef635e07dcadf9c3de46f4d0bc44ff479f1eb826747af5e0361ac4a5ab67e9d1f7d81a0e58217edf7153915d4336061915960690ebbd0fb5fadea3365d530c79ee1f3b34d8e6e0fa657659b7b7f2c0927d7b41fcbef9c6d4ed5a6861d0"}]}}, {{0x9, 0x5, 0x88, 0x10, 0x8, 0x3, 0x6, 0x19, [@generic={0xec, 0xa, "e57c2ee5ff24b77903d1bf9b09110c20d66935b77beba1a6d454dcd8e23342445386c8d08b95900775f998db3d8a5303347896889b0516a5c5c7c415456489ea95fe428c533766cab5ea404225c3cbf6afef671ab37212c54558290c3639e358d68fc1f7f4802c3b069187aab3b8c2692b60061a87df967f483d2469542beb898e0244572fd415bcc2f68bee4f594a53924630a3fae69d830471408e931b87b9bfb00b30b9026fb1c1b4580738ff1426eb2b292624244c51d0bc895ee73744931929dfb9e6fa2f899733f68358bda75e9c78f0751d245ee1b3241f87981382b78d370ecf6312e89ff869"}]}}, {{0x9, 0x5, 0x2, 0x1b, 0x40, 0x3, 0xcb, 0xfb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x30, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfff7}, @generic={0x9d, 0x6, "8754144357c001bb4b57342ec8544929c8d51abd99952bc9992618a72add0c1348b47d62efd35d37c9981aa8d4ec6d100642fe3955974af64a932aa6763415d7b9109ae4642d2011664db6564fcf880d683291da7a2389e818d2de600e71485993e6b9857368f1678476a17ff9918f9656c42a4364404b2c743604835cd0e4d230d65e8e9173e0f04637039c2e58bcefbdbc421707279e1467ce2d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xb1, 0xfa, 0xeb}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x14, 0xe3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x48, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x6, 0xce}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfc, 0x1, 0x5}}, {{0x9, 0x5, 0xefdea6a75c5f4eae, 0x8, 0x10, 0x5, 0x10, 0x87, [@generic={0x20, 0x23, "0558c3ed2511d36390ff72e3e653339100fe8f2232c8970e6d119da8b847"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x6, 0xab, [@generic={0x34, 0xb, "60d337280c8586bad72783058177767d88d0e470a5ba8011e31b87685c6a15b53fdd858f9c5a68c5d4b19f1138ab6243f373"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x4, 0x6, [@generic={0x71, 0xa, "b41d115f7ebc1494c379affd293fd29e7a9948bd23633211d061bb9c0a600cba8fe0b2119a38906c5f6dcae63aa25591fbe3b1f0582311927432dc3d39efb4b84e10b1597426990acb7ff433820636c89a77e025422af74ea42fc77d00e7da656c6d64e96634b96a1231ce040e4e96"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x6, 0x7f, 0x7f, 0x10, 0xc}, 0x104, &(0x7f0000000f80)={0x5, 0xf, 0x104, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x8, 0x2}, @generic={0x66, 0x10, 0xa, "f9fda62b82d05b17e62c1062b81ce65e2d48a637a479db6d2f24a8d1bf8846cb1a4629915134591bd8307f7209c2978d6e803ad0a4c2a468f45dab1f040510e9dd0ce5eadbb83ddd2756634e9f878b3c78486ddb2e141415f80ac554f51d8d894a06da"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x6}, @generic={0x8b, 0x10, 0x1, "413927b3b75bdac8b043aaef890486000092f99cbfea04f9c2662d904fa8eedee13e685d9ad252c92fc23e66c87b9cbe6073ab7a274d8c221a5c840a10099c447a81ab401e7c85d285bb3bc58f07e7880627caf6a701ceedabcc6adfc574ff5fc04be19cd8415a7a32227182c5b39c3ef4584f66cc5abc95cef3c4035e465d597b1a6bf816ad8aa9"}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x2d, &(0x7f0000001140)=@string={0x2d, 0x3, "172173d423f968e0cf426c823fd836fd2adab23694543a69d7faa6fdc87940dea29308a7f60e440f03ec08"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x382c}}]})
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
r2 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0xe, 0x26, {0x26, 0x11, "754473742d261d045a62d81a858597b7f2c7453715b66df7208286e6ec6a9c4d910d4b88"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000014c0)={0x0, 0xe, 0x29, "36e62b83e0e71bfa187df5ab2b9de4e42da834e09b6dd35f607598b0e038c20f55bf878238c420b14f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}}) (async)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x6, 0x90}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x18}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x42, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x6, 0x40, 0x1}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x1, 0xed}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x19, &(0x7f0000001280)=@string={0x19, 0x3, "fe1dc65e2cdcb47898a870c094e44145c78e6862b2d509"}}, {0xfa, &(0x7f00000012c0)=@string={0xfa, 0x3, "d94574285a4de6db7b11a52d8f9b2352d9e611671f471262788534350b09333ecb94cdd7041840600c472fa0fd644e21ee43294290a44a92c744d29adc604b83ab0edac36f2dbcab9a35592a6840340216817f3b083fa4fcd851c52070752b062f492be18152c37fee94475fcbb0a8bfe469c1c6f8f8ec2f73acc4ab5bf86d9bb7f15fcaed4e9536f083e9df5e5d605f815b494bd716733359da21c7715f97c3d31e39182014993c01a9c985ad89db9fb79bbd6ad44bf653363ccedf29de11cf3f95f62bd3c000a9e78d361c3cb497985d372b72dd9ab4de30ecc833b990fab0b150718031fd20c2dc927e95a08111d4e86312f4316f0d21"}}]})
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_disconnect(r1) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001190000000904"], 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (rerun: 32)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000040530848014000010203010902240001010f090581030002030865000000000000000000e3050bf1e2422200"/61], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee") (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0) (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f00000000c0)) (rerun: 32)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program crashed: KASAN: slab-out-of-bounds Read in mcp2221_raw_event
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program crashed: KASAN: use-after-free Read in mcp2221_raw_event
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000000c0)="5000977e2f626820ee")
program did not crash
validation run: crashed=false
reproducing took 1h33m38.129912673s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in mcp2221_raw_event+0x110d/0x1140 drivers/hid/hid-mcp2221.c:975
Read of size 1 at addr ffff8881255dffff by task pr/ttyS0/15
CPU: 1 UID: 0 PID: 15 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_address_description mm/kasan/report.c:378 [inline]
print_report+0x13d/0x4b0 mm/kasan/report.c:482
kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
mcp2221_raw_event+0x110d/0x1140 drivers/hid/hid-mcp2221.c:975
__hid_input_report.constprop.0+0x319/0x470 drivers/hid/hid-core.c:2175
hid_irq_in+0x55d/0x710 drivers/hid/usbhid/hid-core.c:287
__usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
dummy_timer+0xdaf/0x3820 drivers/usb/gadget/udc/dummy_hcd.c:2023
__run_hrtimer kernel/time/hrtimer.c:2074 [inline]
__hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2131
hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2148
handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645
__do_softirq kernel/softirq.c:679 [inline]
invoke_softirq kernel/softirq.c:519 [inline]
__irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 67 04 fa 48 89 df e8 3e be 04 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 02 f7 f9 65 48 83 3d b4 fe 97 05 00 74 16 5b
RSP: 0018:ffffc900000ffcb8 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff944968e0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff892df159 RDI: ffffffff87d2bd80
RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 205d373338355420 R12: 1ffff9200001ff9a
R13: ffffffff89ebc480 R14: 0000000000000001 R15: 0000000000000001
nbcon_emit_one+0x15c/0x2b0 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x613/0x7d0 kernel/printk/nbcon.c:1271
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881255df460 pfn:0x1255df
flags: 0x200000000000000(node=0|zone=2)
raw: 0200000000000000 ffffea00047cb708 ffffea000495bcc8 0000000000000000
raw: ffff8881255df460 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as freed
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3109, tgid 3109 (modprobe), ts 89705281184
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
prep_new_page mm/page_alloc.c:1879 [inline]
get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
__alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
alloc_slab_page mm/slub.c:3347 [inline]
allocate_slab mm/slub.c:3462 [inline]
new_slab+0xa9/0x6e0 mm/slub.c:3513
refill_objects+0xe3/0x410 mm/slub.c:7418
refill_sheaf mm/slub.c:2885 [inline]
__pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
alloc_from_pcs mm/slub.c:4850 [inline]
slab_alloc_node mm/slub.c:4984 [inline]
kmem_cache_alloc_noprof+0x471/0x650 mm/slub.c:5010
anon_vma_chain_alloc mm/rmap.c:142 [inline]
anon_vma_clone+0x2b3/0xca0 mm/rmap.c:346
__split_vma+0x750/0x1db0 mm/vma.c:580
split_vma mm/vma.c:643 [inline]
vma_modify+0x1252/0x2610 mm/vma.c:1779
vma_modify_flags+0x25d/0x3e0 mm/vma.c:1799
mprotect_fixup+0x27a/0xe00 mm/mprotect.c:824
do_mprotect_pkey+0xa51/0xdd0 mm/mprotect.c:1002
__do_sys_mprotect mm/mprotect.c:1023 [inline]
__se_sys_mprotect mm/mprotect.c:1020 [inline]
__x64_sys_mprotect+0x78/0xc0 mm/mprotect.c:1020
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5823 tgid 5823 ts 155017400579 stack trace:
reset_page_owner include/linux/page_owner.h:26 [inline]
__free_pages_prepare mm/page_alloc.c:1418 [inline]
__free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:361
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4683 [inline]
slab_alloc_node mm/slub.c:4996 [inline]
__kmalloc_cache_noprof+0x273/0x680 mm/slub.c:5559
_kmalloc_noprof include/linux/slab.h:991 [inline]
inode_doinit_use_xattr+0x54/0x330 security/selinux/hooks.c:1379
inode_doinit_with_dentry+0x10fc/0x1340 security/selinux/hooks.c:1574
selinux_d_instantiate+0x26/0x40 security/selinux/hooks.c:6800
security_d_instantiate+0x62/0xc0 security/security.c:3703
d_splice_alias_ops+0xd7/0x15b0 fs/dcache.c:3253
kernfs_iop_lookup+0x23f/0x2d0 fs/kernfs/dir.c:1288
lookup_open+0xa79/0x1990 fs/namei.c:4528
open_last_lookups fs/namei.c:4767 [inline]
path_openat+0xa2c/0x2440 fs/namei.c:4997
do_file_open+0x20e/0x430 fs/namei.c:5029
do_sys_openat2+0x10f/0x1e0 fs/open.c:1417
do_sys_open fs/open.c:1423 [inline]
__do_sys_openat fs/open.c:1439 [inline]
__se_sys_openat fs/open.c:1434 [inline]
__x64_sys_openat+0x12d/0x210 fs/open.c:1434
Memory state around the buggy address:
ffff8881255dfe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ffff8881255dff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff8881255dff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
^
ffff8881255e0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ffff8881255e0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================
----------------
Code disassembly (best guess):
0: f5 cmc
1: 53 push %rbx
2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
7: 48 89 fb mov %rdi,%rbx
a: 48 83 c7 18 add $0x18,%rdi
e: e8 b6 67 04 fa call 0xfa0467c9
13: 48 89 df mov %rbx,%rdi
16: e8 3e be 04 fa call 0xfa04be59
1b: f7 c5 00 02 00 00 test $0x200,%ebp
21: 75 23 jne 0x46
23: 9c pushf
24: 58 pop %rax
25: f6 c4 02 test $0x2,%ah
28: 75 37 jne 0x61
* 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction
2f: e8 75 02 f7 f9 call 0xf9f702a9
34: 65 48 83 3d b4 fe 97 cmpq $0x0,%gs:0x597feb4(%rip) # 0x597fef1
3b: 05 00
3d: 74 16 je 0x55
3f: 5b pop %rbx
final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in mcp2221_raw_event+0x110d/0x1140 drivers/hid/hid-mcp2221.c:975
Read of size 1 at addr ffff8881255dffff by task pr/ttyS0/15
CPU: 1 UID: 0 PID: 15 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_address_description mm/kasan/report.c:378 [inline]
print_report+0x13d/0x4b0 mm/kasan/report.c:482
kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
mcp2221_raw_event+0x110d/0x1140 drivers/hid/hid-mcp2221.c:975
__hid_input_report.constprop.0+0x319/0x470 drivers/hid/hid-core.c:2175
hid_irq_in+0x55d/0x710 drivers/hid/usbhid/hid-core.c:287
__usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
dummy_timer+0xdaf/0x3820 drivers/usb/gadget/udc/dummy_hcd.c:2023
__run_hrtimer kernel/time/hrtimer.c:2074 [inline]
__hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2131
hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2148
handle_softirqs+0x1d9/0x9b0 kernel/softirq.c:645
__do_softirq kernel/softirq.c:679 [inline]
invoke_softirq kernel/softirq.c:519 [inline]
__irq_exit_rcu+0x168/0x210 kernel/softirq.c:758
irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 67 04 fa 48 89 df e8 3e be 04 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 02 f7 f9 65 48 83 3d b4 fe 97 05 00 74 16 5b
RSP: 0018:ffffc900000ffcb8 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff944968e0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff892df159 RDI: ffffffff87d2bd80
RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 205d373338355420 R12: 1ffff9200001ff9a
R13: ffffffff89ebc480 R14: 0000000000000001 R15: 0000000000000001
nbcon_emit_one+0x15c/0x2b0 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x613/0x7d0 kernel/printk/nbcon.c:1271
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881255df460 pfn:0x1255df
flags: 0x200000000000000(node=0|zone=2)
raw: 0200000000000000 ffffea00047cb708 ffffea000495bcc8 0000000000000000
raw: ffff8881255df460 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as freed
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3109, tgid 3109 (modprobe), ts 89705281184
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
prep_new_page mm/page_alloc.c:1879 [inline]
get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
__alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
alloc_slab_page mm/slub.c:3347 [inline]
allocate_slab mm/slub.c:3462 [inline]
new_slab+0xa9/0x6e0 mm/slub.c:3513
refill_objects+0xe3/0x410 mm/slub.c:7418
refill_sheaf mm/slub.c:2885 [inline]
__pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
alloc_from_pcs mm/slub.c:4850 [inline]
slab_alloc_node mm/slub.c:4984 [inline]
kmem_cache_alloc_noprof+0x471/0x650 mm/slub.c:5010
anon_vma_chain_alloc mm/rmap.c:142 [inline]
anon_vma_clone+0x2b3/0xca0 mm/rmap.c:346
__split_vma+0x750/0x1db0 mm/vma.c:580
split_vma mm/vma.c:643 [inline]
vma_modify+0x1252/0x2610 mm/vma.c:1779
vma_modify_flags+0x25d/0x3e0 mm/vma.c:1799
mprotect_fixup+0x27a/0xe00 mm/mprotect.c:824
do_mprotect_pkey+0xa51/0xdd0 mm/mprotect.c:1002
__do_sys_mprotect mm/mprotect.c:1023 [inline]
__se_sys_mprotect mm/mprotect.c:1020 [inline]
__x64_sys_mprotect+0x78/0xc0 mm/mprotect.c:1020
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 5823 tgid 5823 ts 155017400579 stack trace:
reset_page_owner include/linux/page_owner.h:26 [inline]
__free_pages_prepare mm/page_alloc.c:1418 [inline]
__free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:361
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4683 [inline]
slab_alloc_node mm/slub.c:4996 [inline]
__kmalloc_cache_noprof+0x273/0x680 mm/slub.c:5559
_kmalloc_noprof include/linux/slab.h:991 [inline]
inode_doinit_use_xattr+0x54/0x330 security/selinux/hooks.c:1379
inode_doinit_with_dentry+0x10fc/0x1340 security/selinux/hooks.c:1574
selinux_d_instantiate+0x26/0x40 security/selinux/hooks.c:6800
security_d_instantiate+0x62/0xc0 security/security.c:3703
d_splice_alias_ops+0xd7/0x15b0 fs/dcache.c:3253
kernfs_iop_lookup+0x23f/0x2d0 fs/kernfs/dir.c:1288
lookup_open+0xa79/0x1990 fs/namei.c:4528
open_last_lookups fs/namei.c:4767 [inline]
path_openat+0xa2c/0x2440 fs/namei.c:4997
do_file_open+0x20e/0x430 fs/namei.c:5029
do_sys_openat2+0x10f/0x1e0 fs/open.c:1417
do_sys_open fs/open.c:1423 [inline]
__do_sys_openat fs/open.c:1439 [inline]
__se_sys_openat fs/open.c:1434 [inline]
__x64_sys_openat+0x12d/0x210 fs/open.c:1434
Memory state around the buggy address:
ffff8881255dfe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ffff8881255dff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff8881255dff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
^
ffff8881255e0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ffff8881255e0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================
----------------
Code disassembly (best guess):
0: f5 cmc
1: 53 push %rbx
2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
7: 48 89 fb mov %rdi,%rbx
a: 48 83 c7 18 add $0x18,%rdi
e: e8 b6 67 04 fa call 0xfa0467c9
13: 48 89 df mov %rbx,%rdi
16: e8 3e be 04 fa call 0xfa04be59
1b: f7 c5 00 02 00 00 test $0x200,%ebp
21: 75 23 jne 0x46
23: 9c pushf
24: 58 pop %rax
25: f6 c4 02 test $0x2,%ah
28: 75 37 jne 0x61
* 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction
2f: e8 75 02 f7 f9 call 0xf9f702a9
34: 65 48 83 3d b4 fe 97 cmpq $0x0,%gs:0x597feb4(%rip) # 0x597fef1
3b: 05 00
3d: 74 16 je 0x55
3f: 5b pop %rbx