Extracting prog: 42m18.631980361s
Minimizing prog: 6h22m11.911475396s
Simplifying prog options: 12m15.754984158s
Extracting C: 5m17.233481023s
Simplifying C: 0s


extracting reproducer from 27 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-write$hidraw-ioctl$HIDIOCGRAWINFO-ioctl$HIDIOCGRAWPHYS-syz_open_dev$hidraw-read$hidraw-syz_usb_connect$midi-syz_usb_ep_write$ath9k_ep1-syz_open_dev$hidraw-syz_open_dev$hidraw-ioctl$HIDIOCGRAWINFO-syz_usb_connect$midi-syz_usb_disconnect-syz_open_dev$hiddev-ioctl$HIDIOCGREPORTINFO-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-ioctl$HIDIOCSUSAGES-ioctl$HIDIOCGFEATURE-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-ioctl$HIDIOCGVERSION-syz_open_dev$evdev-ioctl$EVIOCGSW-read$hidraw-syz_usb_control_io$printer-ioctl$EVIOCSABS20-ioctl$HIDIOCGRDESCSIZE-syz_usb_control_io$lan78xx
detailed listing:
executing program 0:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800)
write$hidraw(r0, &(0x7f0000000040)="caaf5d1130d55c3f91cc7b6093", 0xd)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/135)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000140))
r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x0)
read$hidraw(r1, &(0x7f00000001c0)=""/201, 0xc9)
r2 = syz_usb_connect$midi(0x6, 0x61, &(0x7f00000002c0)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1, 0x60, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0xce, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x3, 0x7, [{0x19, 0xc8}, {0x7, 0x7}, {0x3b, 0x9}, {0x8, 0x5e}, {0x56, 0x7}, {0x0, 0x7}, {0x2}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x4, 0x3, {0x11, 0x25, 0x1, 0xd, "b7c6959942c06a29856314d4c3"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x8, 0x4, 0x3, 0x10, 0x5}, 0x8, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0xac, &(0x7f00000003c0)=@string={0xac, 0x3, "6eec593e498df795b15e4473f47f49f8d5ddc096cafff17c9b752de1bcb6827c3ad93bfd4c0da682d179753f6685ae90062179b793e582dcaddb557dc8c529613ffad17cd0d7429cb5da2777d4c7f26c2154f3ffa105bca28da90ae9442b1bd3b75cd5458416842e3405a1e944a5dd14ad48e0303c2bfcb41cbeddf98991b43887d8e717157d672b9b94ab4116c2a9d41c96ea1ca7209d8c316540992190e7d63dd67a0e75770d84a102"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0xa9, &(0x7f0000000580)=@string={0xa9, 0x3, "c81fe0d5fc03fd3f42bbd0ffecb839319943158c55ed0a353a5d9e0894497d7b139ebabba08dfdff2a472f20dd58dcfe2ace1f6bfe9e7016fd81e43d5e0717b09cf8d1900e02481aa7db65f2d6324adc548089daace8114b9de021d12f1e12043b0ccfd618f754f282b4bf7f9fd8bbab3048c7fb6bb7b2a6d6b5d132010f23a806a87c4ebfab64b641b86a9515a70b54a75a18f6bf2a90eb70d3799cee46fecab294fd6aae7785"}}, {0xd0, &(0x7f0000000640)=@string={0xd0, 0x3, "3901c60dccf94cb3aa83b42319cee55bc5dfdeb33f5fd6c7eaa4029363f49ebaf29940820925dc2596ec414b2f9850f01a0651d9dcc419952de8621839fbe46659e816e4561019969112eb7638d1216200c80c0583a6fbf624de8d76f39939e0d4e3aa2d81bd7ec35d1b7599894bff542525d6137afdb4d6a4d687a9af50c019a6c579422d23d1a92da761919fdcd2dc46add12e9fe84da1e73362e6c974ecfd1b47c28cf0e03075235770b6d6b8ec85c52ddeeaef53f99bb77678a6a826c298e766c861d36f649233ebedbac56f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x813}}, {0x76, &(0x7f0000000780)=@string={0x76, 0x3, "0247fca9de82ab7a2c618bc751167f4bbe6e06618d01babf4ee12283946593f0e80f8b7188d55f6452c295c423be617c94efe74aecb232cc5eb6b53b9f48c9455a592c542e9859346b0a55e5002cf7f2bb4ac651dde8e0bc63e354d93b5385f5b46732a11c73a66d18e38628a5ccdc661f52d075"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3c8, &(0x7f0000000900)={[{}, {0x95, 0x4e00, "301ac046f1172115c63f147555e5b3e227f3d9fb4c53ec23cb950c6a821499d3fc2b88b60a45cb61c1fef9416dfd96a5d4743108ede9497251007c0350bc3c9948b7b14963dcf99fcbdec3392145b02b283b5082f52fece805a61e4bcc540fc005722755b0f99289eb717e660f84326985f0a580aee105c4cb2c31e34374722a2032c1e8ede50d9eeac1af468d68c2ff7300e66dc0"}, {0x4, 0x4e00, "8fb78a69"}, {0x78, 0x4e00, "ee0e51dccd714f7b34dd1fb224136d60e9e51dcb95f89dbd26b5803581e0a8c95ecb3053ade63b3d6f67f14cfd8e70e7d0919041c611dffb044e2a666d19788e06d573407bf52b081fa14b52788b602ee2ae9eec7491c38d8d461f0a062984f25761d9d1cec956c61dcb567911483b6c6c064f3fb3cfe360"}, {0xfd, 0x4e00, "7ddba61ec8b5b5bc7bcdcbf56c5e41f1a61665d68e73a8f1be69e96cd4e5a395bb7cc84fd21e32172cd2bcd74a42e8ceb0cb3916615a60d6d22a5aa2288134fd5ba094ebc9bcc840a74f06c9c6758f69ccbde8514bcc89d3d31e20e8c0dffcf8e7ae114891e10c38080e5c784e30ffa21e6b90a5731167461b57c7945388c9b7eae59793dde675b564e6a763cc3734c701abff4df593581e8474343e2726342062e5df02fe5cb3e381d5410e9e45e3e94e689c49427b38c35d643e9aa101ac394c48b68ccc64c7d893d83e6fef62a67e7a8cf2356b8f0d5294e247dc822cc2deef2c74fc20c5c1d297ae78e51a98ecf199e2a0cb4d4354d4f5c9b818b6"}, {0xf8, 0x4e00, "ea290c2e4ce88336b261a96c07fd7cb9f36987308c1ef5ada778c5931dd3553ffe548a6a3e11e2f99da5269c8b89478c11ad9f03f0f59efa98367ea332e36e6528dd32f9d98a1af6f506edeaa19440a34ac49bb50a41ae70aa689a2801151a62b33461c952d360665cd0fea7d7f205ab5ebae5a853b58f77b20c7c406566387971f31fe894f5304d008ed30911f72f816983c9a9d1b42296a0dd9f372959fc231dcca8c94b194aa21823f69b89ee20b8bd0cd4634511828e1c68727ac2bc804aa8b47b99808db6ed62e390252788860e4b240df8fc193427c64b94bfac30ca66363605f595ad599e5e2e61539658b70ae1911340e15c09ab"}, {0x9e, 0x4e00, "2ca615a2414e6c271ac24894ac0e8527a2aff4552671ea36279b9e34b815c7f327bb4c0301cae45ad7a0a91a25cb21e8f3bbbe25f2f68b50cd16ca6cf490988a19b85f18168eab1bb4c987e34c00d4690448f9f90039bba1ee7b3445f6214535babdcd01533e20256ab97ebff66beb7734909560560b09c9993858c67b5124c6ba6b7bbc959b67da82347a71e7a7a485c9538aa74e06293d2c3649ee5606"}]})
r3 = syz_open_dev$hidraw(&(0x7f0000000d00), 0x6, 0x80000)
r4 = syz_open_dev$hidraw(&(0x7f0000000d40), 0xc259, 0x0)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000d80)=""/235)
r5 = syz_usb_connect$midi(0x5, 0xb6, &(0x7f0000000e80)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x1, 0x1, 0x3, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x8, 0x1, [{0x4, 0xd}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xa0}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x7f, 0x2}, {0x1d, 0x7}, {0x80, 0xff}, {0x8, 0x81}], 0x9}], [{{0x9, 0x5, 0x35fb1c2d00e679e5, 0xc, 0x200, 0x3, 0x7, 0xd, {0xf, 0x25, 0x1, 0xb, "e31c518806825f11aa806c"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x7, 0x7, 0x2, {0xc, 0x25, 0x1, 0x8, "6e44f2bbb12f54fc"}}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x7, 0xd, 0xd, {0xa, 0x25, 0x1, 0x6, "c157c529f4f6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x75, 0x8, {0x12, 0x25, 0x1, 0xe, "218a636f6f1ccd429ca9aaedc5bc"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0xa, 0x1, 0xc2, 0x20, 0xb}, 0x19, &(0x7f0000000f80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6b22f53732c818d1d86b4bb6862a81c7"}]}, 0x8, [{0x4f, &(0x7f0000000fc0)=@string={0x4f, 0x3, "579c5b323ee1ec8cea9f0069ae46d5230a653589fcce49c7a2c7a8df5ad866fd7b2356b98fe2b92c43569267f6d1a007966a42bf46c76d43ff207552f55049d30dc6d9764c1bd25cb720ab94e2"}}, {0x4, &(0x7f0000001040)=@string={0x4, 0x3, "5d14"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1c09}}, {0x22, &(0x7f00000010c0)=@string={0x22, 0x3, "cb5579b514b7025e1fdd467d63581a8af794b3e80f4324397bd5e8b9bbea0021"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x438}}, {0xf7, &(0x7f00000011c0)=@string={0xf7, 0x3, "087dc1eb9b4f0bc1dcfa590860d282b6cd6390d30f38e3352d68c1448f3272283fe345f4a655c8e13346a5aed49e0b7585300f0e3ecb726aad76e2ce40559c6e3c580fee8c543939759e91b6a7aab65f28c6e469f6e08f7205f49fa610d6bb611478827d7de6308d970fdf0a006a25e7229590e80d3c23c75f08192389862c47a458fef2520bb24e8a709bab51cd98e72a839e990dd3378e62bfed2aeed41d200d468200c9e2a84f390a667e8e9fefde17eaf2a04880aaabba510d36005d6887c0c48686fb6c6d19fa2990399113fabcd58a48011cd835161041b635fbca2d6ac28899cb7331a47b174577c344dbf900e0fd9840fe"}}]})
syz_usb_disconnect(r5)
r6 = syz_open_dev$hiddev(&(0x7f0000001340), 0x9, 0x181081)
ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000001380)={0x3, 0x1, 0x780000})
r7 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3, 0x2c00)
ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000001400)=""/8)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000001440)={{0x3, 0x200, 0x4, 0x6, 0x2, 0x8}, 0x3b0, [0xffff, 0x1000, 0xfff, 0xa, 0xa30, 0x7, 0x401, 0x5, 0x7ff, 0x4, 0xc71d, 0x3, 0x915, 0x1, 0x2, 0x9, 0xa, 0x1, 0x7, 0x8, 0x9, 0xfffffffd, 0x4, 0xfffffffd, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0x5, 0x91, 0x3, 0x6, 0x0, 0xffffffc0, 0x2, 0x311, 0x1, 0x9, 0x400, 0x8, 0x9, 0x3, 0xd66, 0x771, 0x1, 0x2, 0xebd, 0x7af, 0x4, 0x6, 0x9, 0x1967, 0x80, 0x1000, 0x9, 0xfcbb, 0x5, 0xe, 0x6, 0x0, 0x6, 0x2, 0x4, 0xa, 0x1, 0x4, 0x101, 0x7, 0x60, 0x7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x3, 0x29, 0xfffffff8, 0x6, 0x2, 0x8, 0x20, 0x8, 0x1, 0x8, 0x7, 0x5, 0x0, 0x1ff, 0x6, 0x9, 0x0, 0x10001, 0x5, 0x802000, 0x4, 0xffffffff, 0x800, 0x4, 0x5, 0x7, 0x3, 0x1ff, 0x5, 0x5, 0x7, 0x5, 0x10000, 0xff, 0x2fd, 0x5, 0x0, 0x80000001, 0x8, 0x98, 0xc, 0x8, 0x21, 0x6, 0x3, 0x2, 0x3, 0x6, 0x87, 0x4, 0x0, 0xffff, 0x6, 0x7, 0x81, 0x9, 0x7f, 0x7, 0xffffffff, 0x44, 0x7fffffff, 0x1, 0x2, 0x8, 0x6, 0x1, 0x28b9, 0x9, 0x2, 0x0, 0x4e17, 0x200, 0x4, 0x6, 0xffff7ee9, 0xc1ec, 0x3ff, 0x38, 0xf246, 0x3, 0x2, 0x1, 0x0, 0x2, 0x56a9, 0x1, 0x1000, 0x0, 0x2, 0x7, 0xff, 0x7, 0x8, 0x3, 0x80, 0x6, 0x0, 0x400, 0x800, 0x80000001, 0x6, 0x7fff, 0x1, 0x22, 0x8, 0x7, 0x6, 0x6, 0x2, 0x6, 0x1, 0x32a7fed9, 0x8001, 0x3c29, 0x3, 0x99, 0x1, 0xfffffffa, 0x6, 0x2, 0x7, 0x10, 0x200, 0x4, 0xb, 0x0, 0x80, 0x4, 0x2, 0x6bfb, 0x1, 0x9, 0x400, 0x8, 0x3, 0x924, 0x72, 0x0, 0x9, 0x63, 0x7, 0x800, 0xd4e, 0x0, 0x5, 0xcdba, 0xecd9f1, 0x9, 0xa7c, 0x62, 0x77e6, 0x8, 0x80000000, 0x4e, 0x7f, 0x26, 0xdb6, 0x1, 0x61db, 0xb9, 0x101, 0x7, 0x3, 0x401, 0x10, 0x3ff, 0xc60, 0x3, 0x6, 0xe, 0x2, 0x4, 0x2000200, 0x2, 0xf, 0x7ff, 0x3, 0x0, 0x0, 0x80000001, 0x7f, 0xd0, 0x7fffffff, 0x6, 0x6, 0x9, 0x93a00000, 0x7fff, 0x3, 0x81, 0x32e, 0x2, 0x0, 0x99, 0x7, 0x8, 0xfffffffb, 0x5, 0x9, 0x401, 0x2, 0x40, 0x1000, 0x7, 0x3, 0x5, 0x8ecb, 0xffffffff, 0x5, 0xffffffbe, 0x7, 0xfff, 0x4, 0x4, 0x401, 0x10001, 0x6, 0xa78, 0x0, 0x2, 0x6, 0xfffffffd, 0x1, 0x3, 0x2, 0x0, 0x7, 0x10001, 0xc4, 0xffffe043, 0x2, 0x2, 0xfffff000, 0x3ff, 0x4bc, 0x9, 0x63c, 0x100, 0x741, 0x3, 0x1, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x0, 0x4, 0x2, 0x9, 0x5, 0x7ff, 0x8, 0x65, 0xff, 0x800, 0x5, 0x10000, 0x10, 0x2, 0x45, 0x2, 0x4, 0x4, 0x9, 0x0, 0x6, 0x5, 0x4, 0x3, 0x5, 0xa40, 0xffffffff, 0x7, 0x3, 0xff, 0x6, 0x100, 0x7f, 0x7, 0x9, 0x1d2, 0x40, 0x101, 0x4, 0x10, 0x3, 0x1, 0x0, 0x7ff, 0x8, 0x7, 0x7ff, 0x9, 0x7475, 0x7fff, 0x6, 0x7, 0x4, 0x0, 0x6, 0x1, 0x9, 0x1000, 0x2, 0x2, 0xb, 0x1, 0x4300, 0xd3c0, 0xfffffffb, 0x3, 0xa448, 0x7, 0xbaf2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x100, 0x2, 0x7, 0x5, 0x100, 0x0, 0x100, 0x4, 0x3, 0x192500, 0x0, 0x3, 0x9, 0x4, 0x6, 0xffff8001, 0x2, 0x9, 0x4, 0x6, 0xe, 0x10000, 0x0, 0x1, 0xc5, 0x6, 0x6, 0x1000, 0x9, 0x4, 0x0, 0x0, 0x2, 0x5, 0xffffffff, 0x7, 0x973b, 0x70, 0x1, 0xa3, 0x3, 0xff, 0x6, 0x0, 0x100, 0x7ff, 0x6, 0x3, 0x1, 0x1a0, 0x9, 0x0, 0x65, 0x10000, 0xdd59, 0xa81, 0x6, 0x5, 0x7f, 0x6, 0x6, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0xffffffff, 0x10, 0x9aa, 0xb20, 0x1, 0xab, 0x10001, 0x4, 0x8, 0x99f8, 0xb, 0x7, 0xf, 0x4, 0xc, 0x4, 0x1, 0x8, 0x1, 0x10, 0x8, 0x7, 0x3ff, 0x0, 0x9, 0x9b, 0x1, 0xffff7fff, 0x5, 0x6, 0x5, 0x9, 0x6, 0x7, 0x600, 0xffff6a0b, 0xc, 0xffff, 0x3, 0x4, 0xffffffff, 0x81, 0x6, 0x7, 0x1, 0x40c, 0x3, 0x0, 0x6, 0x1ff, 0xa, 0xf5795e5a, 0x3, 0x8, 0x4, 0x3, 0xa943, 0x9, 0x80000001, 0x6, 0x1, 0x7, 0x0, 0x7, 0x1, 0xe, 0x6, 0x1, 0x3, 0x7f, 0x3, 0x101, 0x4, 0x1, 0x10001, 0x7, 0xffffffff, 0x5, 0x2, 0xfff, 0x1, 0x6, 0x80000000, 0xe6f, 0x1, 0x0, 0x8, 0x6, 0x8, 0x2, 0xffff, 0xa1, 0x0, 0x5, 0x9f5, 0x8, 0x3, 0x40, 0x4, 0x8, 0xe6f5, 0x0, 0x2, 0x0, 0x1ff, 0x5, 0x1, 0x7, 0x10000, 0x6baf, 0x3, 0x8000, 0x1, 0xfffffffb, 0x2, 0xeed3, 0x8, 0x3, 0x5, 0x600, 0x7ec8, 0x2, 0x6, 0x9, 0xb, 0x5, 0x2, 0x401, 0x80000000, 0x4744, 0x10001, 0x0, 0x4, 0x2, 0xed2, 0x3, 0x3, 0x8533, 0xa0b, 0x7fffffff, 0x3, 0x2, 0x1, 0xe8, 0x100, 0x9, 0x4, 0x10, 0xfffffff7, 0x8, 0x3, 0x0, 0x510, 0x0, 0x3, 0xb, 0x2, 0x8, 0x7, 0x101, 0x3ff, 0x5, 0x1, 0x8001, 0x0, 0xffffffff, 0x8, 0xfff, 0x400, 0x80, 0x53f5, 0x7ba, 0x1000, 0x6, 0x100, 0x26, 0x5, 0x1, 0x2, 0xffff, 0x1, 0x6, 0x2, 0x6, 0x9e0, 0x2, 0x3, 0x3, 0x1ac12aea, 0x9, 0x2, 0x5, 0xfffff000, 0x8, 0x84e7, 0x54b8, 0x8, 0x400, 0x7, 0x8, 0x1, 0x0, 0xf, 0x5, 0x1, 0x48, 0x200, 0xd, 0x3d2a, 0x0, 0x7, 0x1, 0x4, 0x7fff, 0x800, 0x6, 0x0, 0x7b, 0xca, 0x1, 0x1, 0xf, 0xa, 0xffff31dc, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x6, 0xb7, 0x66, 0x7, 0x9, 0x0, 0x5, 0x4ac50617, 0x6, 0x2, 0x2, 0x6, 0xb3c, 0x0, 0xfffffffa, 0x8f, 0x800, 0x8bc, 0xffffffc0, 0x69, 0xffff, 0x5, 0x52a5, 0x6, 0x7, 0xc5, 0x4, 0x10, 0x1ff, 0x8000, 0x8, 0x9, 0xffffff41, 0x6, 0x6, 0x1, 0x67, 0x7, 0xfffff691, 0x3, 0x8, 0xfffffffa, 0xc7, 0x10001, 0x80000000, 0x3, 0xffff, 0x51f0, 0xa, 0x8001, 0x7, 0xe82f, 0xf, 0x101, 0x2, 0x101, 0x9, 0x80, 0x22, 0x4, 0xffff, 0x9, 0x3, 0x3ff, 0x6, 0xd6, 0x6, 0x5, 0x21, 0x2, 0x8, 0xe, 0x800, 0xcd, 0x5, 0x6, 0x80000000, 0x5, 0x73fc, 0x4, 0xea9c05a, 0x6, 0x7, 0x57, 0x7, 0x3, 0x2d, 0x6, 0x2, 0x6, 0x4, 0x6, 0x8, 0xffff, 0xad, 0x2, 0x8, 0x0, 0x80, 0x3, 0x8, 0x2, 0x878b, 0x100, 0x7, 0x1ff, 0x79, 0x200, 0x3, 0x4, 0x9, 0xffffffa3, 0x101, 0x6, 0x2, 0xf8, 0x100, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x5, 0x0, 0x6, 0x7, 0x100, 0x0, 0x8, 0x9, 0x1, 0x4, 0x8, 0x101, 0x1, 0x4, 0x81, 0x4, 0x5, 0x2bc5, 0xb, 0x9, 0x0, 0x40, 0xbc, 0x8, 0x1ff, 0x3, 0xf30, 0x3, 0x5, 0xfffff965, 0x44dd, 0x7fffffff, 0x8000, 0x9, 0xf1, 0x80000000, 0x4, 0xffffffff, 0x0, 0x1, 0x7, 0xf4, 0x7, 0x1, 0xfb, 0x4, 0x48, 0x7fffffff, 0x7ff, 0x2731, 0x3, 0x6, 0xc00, 0x1000, 0x3, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x3, 0x5, 0x5, 0x1, 0xc00, 0x6, 0x1, 0x9, 0x200, 0x4e5c, 0x80000000, 0x3cc8b1f4, 0x1, 0x0, 0x401, 0xffffff0b, 0x42c3, 0x3, 0x9, 0xd, 0x9, 0x4, 0x1, 0xffff, 0x1, 0x4e39, 0x8, 0x80000000, 0x8001, 0x6, 0x9, 0x7fff, 0x8, 0xfff, 0x9, 0x4, 0x100, 0x2, 0x2, 0x7, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x61d, 0x3, 0x5, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x4, 0x8000, 0x7f, 0x3, 0x3a75, 0x7, 0x1, 0x100, 0xfff, 0x800, 0x0, 0xe, 0x47d9, 0x9, 0x3, 0x5, 0x4d04, 0x6, 0x120, 0x2, 0x6, 0xfffffffa, 0x9, 0x2, 0xf133, 0x0, 0x8, 0x3, 0xffffffff, 0x2, 0x0, 0x781e, 0x0, 0x4, 0x1, 0x9, 0x9, 0x99, 0x9afc, 0xfffffff3, 0x976d, 0x8, 0x200, 0x100, 0x2, 0x5, 0xfffffbff, 0x7ff, 0xf, 0xc7, 0x1, 0x6, 0x80000001, 0x2, 0x7, 0x8, 0x7, 0x3e268a1f, 0x4, 0x929a, 0x2, 0x2, 0x10000, 0xe, 0x4, 0x3, 0x7, 0x9, 0x3, 0x2255, 0x62, 0x8, 0x45e, 0x9, 0x9, 0x2, 0x2dc, 0x0, 0x10001, 0xec8, 0x9, 0x9, 0x2, 0xf79e, 0x5, 0x2, 0x4, 0x10001, 0x1, 0x5, 0xded, 0x31]})
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000002480)={0x6, "33878ece3ed0722983b73970f7e3bd819354d537842749a66d129fcf538215e048ba20f39de3441d8d164da66fd1207a9490b689907a32d03e4828ed6a4a9c2a"})
syz_usb_ep_write(r2, 0x6, 0x55, &(0x7f0000002500)="247c9b18d30e33cada1d48cbd9aa36b317e9b4e98510d630962608ffd3a9112ff57cc610cbfe87eb5565b7781d6420bbfcbf63194bc095ee346f30175eaa63c43227eb118613478a2314efb16cb4dc41c24e4d5797")
syz_usb_control_io(r2, &(0x7f0000002900)={0x2c, &(0x7f0000002580)={0x20, 0x9, 0xf3, {0xf3, 0xf, "d52fd064aabac700b55daf4c3cffff66d02a6f16f1ca68defd187e7f2b0e089ab0a72676749e5742a3ccd0946abf01bf1f399e274a343a533e3576c21eee5bf7e7b402880674c879837db865654204fa703291be4770fef8eea03334138ef0b989ff1f015d1c5ab73dfff8eb5b064e333ecd85c4b3dce67d8d17990a0e5d9dc07cd1850b91acf93393f0939304eaf2016fdfc40d6515b7d5ee7ef044868eee30cec60f17e4d0d4a56258f4c97ad91d2ed2ddc0c8c5019ce7d41fbe52d1238f8b11c10b3e7abeac35f4f0315abe240bfb2accdb37964621b7ef637a503a73e99d72707130b08c81bad552f508f1e9a8d176"}}, &(0x7f0000002680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000026c0)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@ptm_cap={0x3}, @generic={0x69, 0x10, 0xa, "6c7e77e729a3e31b467d9a3294954883268b53faeb06a16f6f6e115f45801c112b458081b1ade911b280ec949aa1311bc562ea14e04607387c1e2720288f9eab263b662a281e821d7739b1b82a8d4bfe1df0c88a2eb34c4072a257652ab54263321269dbf990"}, @generic={0x29, 0x10, 0x4, "2dd679f7a270f012b7f89607d27db6e8af13a86db4be5b221e783b98b8135d3e60fc0991d450"}, @generic={0xfb, 0x10, 0x3, "06eac6a36753dba4e529fe71362ab57e72abb2621be44e69f71e4cd06b9398ce5c320e1a98e1bb62e5e10562350cf840f4af06a551c2c70b39de0532395a48296fa72629d18da2f0d45d945e221ba6c92e9ec096ed0d49849ab585b06f3dd3cb93de848d3338fab5648055478cd11e63e94fb2fa74328e43e6b08f3880fdf5b797b55144428aa59eba81f5d5dfa086700aa8444f3917570695f9370c25a231594976e3f46913b9824274da668a607eaa7a2958840ccb02e4d3f1563d50af70499d00bc1c63c7aa908ae411fb8caea157cbfae0b27a23ddd2baf7a9795344a025a8d809544ced95fab394de878d00c6d43cd6224d3bf3a2ee"}]}}, &(0x7f0000002880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x1b, 0x1, 0x0, "c3da9dd3", "49b8a637"}}, &(0x7f00000028c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x0, 0x7f, 0x9, 0x7, 0x4}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002940)={0x20, 0x8, 0x1c, "c63e453a2bde87eb3737a259c6c3dc85a3a9aa94f9fd65cfadd1dd1e"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x2, 0x4, [0xf00f]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0xd5b8}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "f3da"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002b80)={0x40, 0x13, 0x6}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "0c9c"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0xfe}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002d00)={0x40, 0x21, 0x1}})
syz_usb_control_io$uac1(r5, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0x2, 0x96, {0x96, 0xd, "5ba6b421ef64da824889a11ecb0d94b7cfceec12b1a156430f524e9b355015ed1fbf4135626601da4f6aca89bd6a97a7e3c3c357e10765d124c805e9f2bbd72eb34c8e4350cfb0aea801930a19c5feec34362557c7d3616d8a1d853398f0a350388f73034b25f281ee3e13dc8883c53412af58271c40ab6080b4fc3bd53c76cd780d12b8732407805426115c2079a29cd621929e"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000003200)={0x44, &(0x7f0000002f40)={0x20, 0x31, 0xcf, "25ea09078acce2420fce1206c4c96e3e8e471bbb69e9e21eb8af4df4a0004ecde4fd3b6774a37c890cdf7b96f791c69adc17ef8d9ab1a379b9302ac66d4d557d178c013220f00f188f1b3745234f013a88b6b02dfd2b9922b0aacd5de370b944ea1b2057bc255f9c18bc5f8e148b86f1bc63d2077f3e35b0b15e72a7d7fddf2519611179ce6098015d46b35472489c44b41311fa2764e8ffb910b91e125eff9c879a5fbbb413627f26f1fee99ca4821cb21d93278ebd39610bc6c4f39b2322fc459dc13a08c823c3c2424ae39d02ed"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000030c0)={0x20, 0x81, 0x2, "b5a5"}, &(0x7f0000003100)={0x20, 0x82, 0x1, "89"}, &(0x7f0000003140)={0x20, 0x83, 0x3, "0e249c"}, &(0x7f0000003180)={0x20, 0x84, 0x1, '<'}, &(0x7f00000031c0)={0x20, 0x85, 0x3, "1a8a28"}})
ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000003280))
r8 = syz_open_dev$evdev(&(0x7f00000032c0), 0x7, 0x8200)
ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000003300)=""/157)
read$hidraw(r1, &(0x7f00000033c0)=""/128, 0x80)
syz_usb_control_io$printer(r2, &(0x7f00000034c0)={0x14, &(0x7f0000003440)={0x0, 0x10, 0x1a, {0x1a, 0xd, "3f757ed882ccbdb2563b3b5ca69f3e15ab27fbfb284c3461"}}, &(0x7f0000003480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000003740)={0x34, &(0x7f0000003500)={0x0, 0xe, 0x5, "12d3f64bd4"}, &(0x7f0000003540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000003580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000035c0)={0x20, 0x0, 0xf5, {0xf3, "0ea7c8008ef26143149635411a5e999376516de27c17dc4770e96952ab4f17d71ce7bc6f0b3a009eafd8addf705514d5405654f6056fd602c65aa939878bba6f8fb06aed6113a16edbb84fd616413658721232bc807c3d2b8ac49c91b5ad26bf58110332bb9eb34906c4e81045c9e2a86134390d071881f8c86bbccd9df2abfe793a7fa6772e7151fc01c9679dd77a88b1dd4921a7471cac3b86f21e033666e5fb559d141e05d750a187a0f552bd1377230f0913cea75ef3ffe304c91ab54afb118ca25b33676453ae60247f1db58015e6be8259f35e354f5a30268e16c469e43a96300386f52e7670eba6af97809e04b60ac0"}}, &(0x7f00000036c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003700)={0x20, 0x0, 0x1, 0x1}})
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000003780)={0x8, 0x0, 0x8, 0xffffffff, 0x0, 0x5})
ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000037c0))
syz_usb_control_io$lan78xx(r5, &(0x7f0000003900)={0x14, &(0x7f0000003800)={0x0, 0x30, 0x59, {0x59, 0xe, "b22acf731b83ba374d1311ac2bf283716ca0485220392af6ad14205c71d323ac8ae1153e88d078f004fd4a6b736c22fe591f87b302177d0722a4c97f2ffc93f4c11a7b011fb96aa66a4274c7b197cda6353468d35dc2c5"}}, &(0x7f0000003880)={0x0, 0x3, 0x70, @string={0x70, 0x3, "ce4f9e8329706ae06e7dd0d5bb0523df424a4d7871860336688d0364ee086270837dca935276a01802237f636a0069868e83cdab75be9003af8be076c50d76ba0dced656725474c9bf8af54919733bf94d3c05ddb3ba560ab6e48966873968364052cb5533cd89022b3467d2538d"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003940)={0x40, 0x16, 0x35, "d711fd192258f1ec1638a1679bee7d5f3ea6fe7ced37ce4488805ed9de3b2314f832b65d2ff63d9705c06c7a020eb56f92851a1e1d"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000039c0)={0x0, 0x8, 0x1}, &(0x7f0000003a00)={0xc0, 0xa1, 0x4, 0xc}, &(0x7f0000003a40)={0x40, 0xa0, 0x4, 0x40}, &(0x7f0000003a80)={0xc0, 0xa2, 0x2f, "9fc466298528f12223401bd467522fdb2e385abe368cb0f6ee5c37790ad684f29864981d415bc8f3f13125b104781b"}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac3-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904b1d02cff023000090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_ep_read-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0xc, @string={0xc, 0x3, "acf322afd3a694bf4b82"}}, 0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000338d19e40c6050592d77e01020301090224000172061006090400e802ff34bc03090501024000ff0d030905ca"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="e2")

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac2-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000206a05c600000000000001090224000100003070fbffffffffffffff010009210500050122280009058103ff030481"], 0x0)
syz_usb_connect$uac2(0x4, 0xc7, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xbb, 0x20, 0xc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x9, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x5, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x5, 0x1, 0x0, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x6, "25a75e", "b6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x56, 0x0, 0x4, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, "8f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x9, 0x80, {0x8, 0x25, 0x1, 0x0, 0xc, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x2, 0x87, "d70adf43ce7b6b090c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x3, 0x52, 0x6, "06", "88e5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xd2, 0x89, {0x8, 0x25, 0x1, 0x81, 0x3, 0xe4, 0x1}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0xf9, 0x9, 0x40, 0x72}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0xf5, &(0x7f0000000440)=@string={0xf5, 0x3, "abc217e49d61109098dd71da42ba2fb390aeed8338f5334ccd983ae24be910f6ca15197bb0330d685b3de998f3bfdfbb5e8ad6bdf384f0927a773e3c9673d9f702e8bb34632ba1cdbf152287eecf900c76688235b392a4bbc2e58d1f37df122fe8c282a6a090d4125230a0eb3e8b290332f7e506ca19729df5d95639153abaaf983b7c84bf7b9d9377db499389e0036db1a6d33deaef7683ee319b3bae2e92770637935bbf620c66501690becc7f5561b16346e7553bbf4115470f4ba7a48b7f66069eaca71c1469bd897176cd1592dc51f12f4b7c8f207aa3cabeed7e3c7b753e7eb3c0ddd37fb02acbe4c7d3563bd6bfc25f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="2004420000004222f17d3816e9bc787a4d4cdbb3f5bc62b1d6ad5a9a56381b21a60f9dba43b59c23e92812aeb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 27 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [40, 7, 9, 19, 18, 30, 40, 22, 13, 30, 6, 21, 26, 13, 14, 16, 7, 30, 16, 23, 4, 25, 40, 29, 2, 7, 30]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d007001000102030109022700010100804d090400000308065000070501020002000705820200020007058303"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x3, "2660a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x6, "56f1b39b85be"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (async)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0)
syz_usb_control_io$sierra_net(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xca, {0xca, 0xf, "f3af812c993f863b66822aeddb04034c5852fcb6cfaf0b74c0ba2c38337638bc8a69af6c9f31e666fe1d674f74cffd713a5a68f0165281ade992ba7c8e65e8ee6adf5b4daeb78e02d22be8b586edd335b51014d10bb0699b53318be7a3e8fcb70cd252381ae1c6d799b4c2e1eaf5f2820fcaebce213b2374f1eefc3b0a6bb454633ff11cf8584b79424e8f95c0d8a61972b718e6993829cd18e49959d0459cca188d0269ff0285010472c7f7543353667cade08b4658d7e044e1971c80e422e41129a7861b33304f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x341e}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000240)={0x20, 0xe, 0x2c, "b743b48a7dbd3f2a66f9a46a6104ada6ad487beff3232fd1c175a2e304e4936d8d5574a949d247a066089665"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000940)={0x21, 0x0, 0x4, "efe63c73"}})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r2])
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003003ba9590195143be2000010990421104000010203010902120001010d090400000001033008"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}]}) (async)
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003003ba9590195143be2000010990421104000010203010902120001010d090400000001033008"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}]})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd992d40431950220100010203010902120001000000000904"], 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xaf, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0xcb, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xa, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x4, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x1, 0x4c}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0xfa, 0xc6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0x7, 0x3, 0x10, 0xfb}, 0x73, &(0x7f00000001c0)={0x5, 0xf, 0x73, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x5, 0x0, 0x80, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0xa9, 0xf88f, 0x9, [0xffffcf, 0xc0, 0xf0, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8440c34138e2446940989fbfa20353eb"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x1, 0x7800, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x5, 0xf, 0x8, [0xff0030, 0xc000, 0xff00, 0xc000, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42f}}, {0xba, &(0x7f0000000300)=@string={0xba, 0x3, "75a9744fbdfa6283232d3c2a8f590c63d3187e4c85598ab0c34275f16047e044bc777a2ad151aedf3290e6a95001f918a213c9682b667c9018f7f5a465626d9631d7894f8bb908d3a53ac61ab0e5db78cac5e7e4e5060c4e09cc4b1eb09b41d4106fdf98f8b4eead0e82b156ecf68f6437220669be1c13fe3c6d82478d119b6685c0911b7f2d5cdedf33bdbc5be7259e9eed45419e901ac8c7c882de2a31bca89cb6aff5a348bf0011b34e8ed648a4de8ae6f71a8092e31b"}}, {0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "9b40ff7a099f2b6311761d29a3437fad499e5896aac524c0de50c80b015a23debc9bb81876e06435f142ea4d001540368bec1bda9ecd8116be7e5e3e82ace312599e33c21e"}}, {0x61, &(0x7f0000000440)=@string={0x61, 0x3, "4fe710128d6067eef3a3a405a3c46a8cabe5aab8bac9badb9c23ac9f32ef0df56885b66d291d3071e813332b2e91cc242f17bfaa75ce5678d392435476541a583e97209b80486431f92bd7b22963a20ee57dac1b25b9c239a7ca16824b83d6"}}]})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) (async)
r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="2005010500004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="2005010500004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0) (async)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000040)={0xffe7, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 3:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_control_io$uac3(r1, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x40, 0x1, 0x98, {0x98, 0xf, "d78ef53c657ec19b86e73dc6db1dd4b8a0439ca389e48a4f0f7660f9430d56332ea7861802bf2f111261376edeea198f09aef4c5ddd7588e36f3c913888de731efaeae76aa11459946f4fc2e14fb9edddcf2aa1379153fc21259153c521d1cf3447e0ac0f7aef1daf6f3f7cfab4799554b499cf4f322cd3246c343a2e81955864b59e5e5295c9d86abbceee8de35d96353dc8ece0978"}}, &(0x7f0000000180)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "6412fc0a30810e2eb622edb71720f1f63ee98f360f26187c379659ade7cd888160e7097222dfe31df05360c5db8f4f411f989f0ce6f5af4fae8aacefa04f5554ba8d444d2c589fbfbdd0bb5e125803638630850b5a36d5e5817e2b506a3d8b46429138b2a3bfa50972b2b4e462372b1351745568a3a6613cf03304727899847ec3a07d860996c9be0e94b74979a671d669decced3fc0b6f350020bf00d3eaee05e8c156ce1d941d359211af2f2fc5c263820d4bc08dba38e71acb55bdda7a126d9079d0df861d4d6272691ec8a1aefb8e08b1d3b1d18df8f2186606282a9cb2a39e1d579a957539cf5613162b05f8e99b7faaeb65d6da1e4a7c8"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x6, "2d169bf5bdac"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000003c0)={0x20, 0x81, 0x3, ',-0'}, &(0x7f0000000400)={0x20, 0x82, 0x3, "6ed2bd"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "8d99d0"}, &(0x7f0000000480)={0x20, 0x84, 0x1, "c8"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "0501f9"}})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES8], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x49)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x3, 0x100, 0x0, 0x1ff, 0x10000000, 0xa02})
executing program 0:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x3a, 0xe2, 0x2a, 0x20, 0x17cc, 0x1010, 0x24fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xa9, 0xd8, 0x0, 0xdf, 0xf8, 0x68, 0x8}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x10, 0x48, {0x48, 0x21, "50a5b24dbf9fa5b197875cc26fb4b7df5f18bf1f7f1d6857488af11a92ba3cd77d08acd6a767d89639cf296dd9e35700bc6a8e488cd3d87f10531b5906845045c4f6ba2710ed"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000004c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0xb7, "6518013c", "ce3b6487"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0xa, 0x0, 0x7, 0x9e, 0xf}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000600)={0x0, 0x3, 0x71, "dd3d2be064a72d37a5166068f43cb226cbdaf10b7787ceb25e05456e1bc14ca4d4c446e2114034241c02eb046de26bdfd3eb058f37413a617224bbc64700f205925e6a5ff396cdce4f7646e1e75728a1c15ebf585e80d126818b335b378be7ea28df78cdcefafe8e334a1dc675cc21b2df"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x120, 0x80, [0xf00]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x9b81}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "859d"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "3c8b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x280}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x8}})
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x200)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000002e40)=""/186)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x4, 0xd9, {0xd9, 0x1, "98bd03855081909f4c8f42f1589a36a8544d5c3a5a30b36abaf6abb427bdf3dc3a048b5c8558a0242430b3e93a932d4aaec2ec31dd24789ef4ec46bf0f62b1f6b12e2b97c1bc20faa951465564108bc529ae6b9d8fbc48a5619c7c7590c37c05e07f5343b5344332e254cdbbe8b5c014e55e8faaa4b717ba43b457c71a0f9305161e3c1bda5457a1adccc8dd7ae2c944e9daf26f1f67cd1f8bee2ce518ef78adad3a28c3a7536916af23d40b248cc090371100b9350be30a29fbf7ac03933805ce40ca0c0f51ef7ee0015ca7e7b6eb3cc8eb4c3e8387fd"}}, &(0x7f0000000100)={0x0, 0x3, 0x54, @string={0x54, 0x3, "3c74b452c26ea800a9455435ae669aa485f4fd490b582dcb9683edc6c7df0740e43dba72542fd8a9ac3da53fc3c7bebac1990764181eca2051e1a3a8cc9159cfdc2cdc5a2b282acbdc0e3a7ad94244f08ccd"}}}, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="40008f000000178411495b7201a718b81785f8e172eeb2cabb0b534c8b814aadf3ef4bbef1273d490c49b835aa10e7db64f4e3db3837d6928022d34d1ed261e6b71b46c08825f54fc64bd134c0292cf8a757c7393cd3fb176575ab41ccc9439f3838d11dc34d3a98dfb267a90695eb975fe66fe44932dc53bccf18cd7dae3af530e35c74d08823f78d73e4c7778b0b301083d0239d"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0xc0, 0x5, 0x2, 'z`'}, &(0x7f0000000340)={0x40, 0x5, 0x2, "cc45"}})
syz_open_dev$hidraw(&(0x7f0000001340), 0x800, 0x8000)
syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/353], &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x9, 0x8, 0x7, 0xff, 0x3}, 0x20, &(0x7f00000006c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "7c0019bcb5638952ddc7c758efda4155"}]}, 0x4, [{0x7c, &(0x7f0000000700)=@string={0x7c, 0x3, "142c497dcb0672c30a2c60136fa60862dd535124fa23ba51786e0586aa8ea529eae2f78ee9268eba587b21888fe4aec1ad23e7c96db1f98d93d3f61edf2436d03205442ed03e6c3da3d0535abe4237da86bc8863f8e5ababc52d5852a4c9ec55ee49976b8a391e5f74d5fe3d8cfd1fb96dbb9f11f1cc913d2c22"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41f}}, {0x1a, &(0x7f00000007c0)=@string={0x1a, 0x3, "39228668986e4177329ca8a662e6fff732ae5510e470cc5d"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x437}}]})
syz_open_dev$evdev(&(0x7f0000001380), 0x6, 0x10bc7d3efca9000a)
syz_usb_control_io$hid(r0, &(0x7f0000001100)={0x24, &(0x7f0000000f80)={0x20, 0x30, 0x8e, {0x8e, 0x30, "ba48cd3fefbdf3ca9e12b82b3f935b2d0d149d2e396f51c44a1e3b07c764e0699be038196d2fa7f7a91a3dc049d50c94a5040d55a0d0cbed93abc78c88b9580934f33876c94abba0f76627bff1fe54971025b9bca6ee8f0033146ed01e05463eaff0199ef2ed13a703bcabfce2fcd276681e1c76e235eb66cfe7929b0dd7ace976196839d2aafcb8319a1588"}}, &(0x7f0000001040)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e570b25c082620d6c84691e424b988d5ee1c11a8dd6bcc4343068c"}}, &(0x7f0000001080)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xa, "257b0509"}, @local=@item_012={0x2, 0x2, 0x2, '>:'}]}}, &(0x7f00000010c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xf97}}}}, &(0x7f0000001300)={0x2c, &(0x7f0000001140)={0x20, 0x1, 0x1, "8b"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001240)={0x20, 0x1, 0x61, "f4dbbb45cb4eea8a7737a7fa7e301d9770c993f0c921661c408943773b2594968674d7a407bf2f857bf88767a31abea7586ae5f442b4561f6dd4e39bf831fac1cc97cbc36174cd5e60df177faae5ea182247ad96bb5b28eb654628f2260635465f"}, &(0x7f00000012c0)={0x20, 0x3, 0x1, 0x93}})
syz_open_dev$char_usb(0xc, 0xb4, 0x6)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000003300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x0, 0x80, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0xbb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xa475}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd5, 0x4, 0x2, {0xa, 0x25, 0x25, 0x236, 0x8b, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6c, 0x81, 0x6, 0x2, 0x3, 0x7, 0x8000, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x71, 0x43, 0x6, {0xa, 0x25, 0x25, 0x3, 0x2, 0x200}}}}}}}}]}}, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[], 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r2) (async)
r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 3:
syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x4, 0x60, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x48, [], [{{0x9, 0x5, 0x89, 0x2, 0x0, 0x1, 0x4, 0x5, {0x5, 0x25, 0x1, 0x1, '2'}}}]}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x4, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff000000070502020002"], 0x0)
syz_usb_ep_read(r2, 0x2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, &(0x7f0000000e40)={0x14, &(0x7f0000000cc0)={0x60, 0x22, 0xf6, {0xf6, 0x22, "e7a0af69aa8265f69213f74219cef334ed7d430fe8ddb625b318a224eb84fcfcd95ec54c566ad166b46e56eb29d0aaedf80d9f03fa4de755cea10a3536ea1f7f520d7e09e798c83d60eaad09989122e13c691b96e9cfd020a08e9f5f660c1b170e272208bc0838974acef723b905bd46dd135e9dbb1c17675130f1f4b589683b5665d5dedfb1fb36781bf1ccf0f58ad3cb592b15d0c3dad2e185e8a2e4d3f26fe96ef8f7964b4be39b41b049316d97827c7f836d45e03913d09fb84dfbe3b18554f38281c6247bd93ab6d6241c95faeeb28de00e29b12dbc657ce1793d4896c7fd3e6a63dee04d2fe740e54221aee9ca09ff2726"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "0a407a82163b0bc2ae03a5f157d7318eb61e639c38bd00301d5c277f856bec4ecce47d93867c95f41e03705185a7315d932b5d336d35f32ae800"}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000e80)={0x20, 0xdcb2f25d0e2503eb, 0xb2, "c743bf6fd600d03d6aa2b67ffc68786d8768c6abe1dfaf647363b1f51a44ef23b6eb05deb6fc177375feca84a213f3a3509e4b094a3fcc0e1527d7b9c54cca0004a6a8cf801f5273e4d337fb02994fd32067bde6f61cc50cb23d8ca55c0cbb85e3bc3a45472282a4ff31974fcd7fa8392c0630452a98e32dfe99c6dc643fa74f6c8ae032e67de555e171348ea43dfcfc3efee21c70e55036c73f41dd328e960ce9dea28c577ab917ff8e2250c677d9b62a49"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6e}, &(0x7f0000001040)={0xc0, 0x5, 0x6, "73b4d66a1b8d"}, &(0x7f0000001080)={0x40, 0x5, 0x4, "ea33ba94"}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x40, 0x3, 0x3, "7f3088"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x60, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x89, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x7f, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x0, 0xff}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0xb2, 0x7, 0x20, 0xb}, 0x11c, &(0x7f0000000280)={0x5, 0xf, 0x11c, 0x4, [@generic={0xe0, 0x10, 0x1, "1125e7a8e957952e49ee87dc121287706bb2653377526125c1f7b2dde07bc88010c35c1c3b1a0fdd51800571fd0586ab3abe72bc1fab0b013134ccbba1314fc0f5073b4b387e359d1ae3edeb347bc31158cb67192f2d163377fe223d4fa9c71f1a3a2996ce08862ce8343c4f2912fe2f6d36097d96880bafe3b4901602ce4513cb57e5d19c1953ee256e6c0c880363b910ebc623d7c79facb901838786913ec2c4827012f3f67080c792f930fa1916fb454d6c633b3da2aaa59cba5d0e2bae5909312ad07083bbd82b659c96abbc432df218a853e776b8d07e4fe9280f"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x401, 0xf, 0x2, [0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x9, 0x1e00, 0xfff9, [0xff, 0x0, 0xff0000, 0xc0cf, 0xc028, 0xff3fcf]}]}, 0x7, [{0x7e, &(0x7f0000000440)=@string={0x7e, 0x3, "081a28ccc9c49ddba0de9b14f4d5b1257ada2ff2e9882d15b0ddb65e540763060a8e1675fe646ceff3a93c853e04abd5a7469d1bdf754e6b33a69bbf0b07b871ab8acc3c167b81c28c8205b9e29a3474a311f384a00f28377713e806beb62f3d105fd34dbf2e6420f972532d78143077f9110e764380d2d5830775de"}}, {0x8b, &(0x7f00000005c0)=@string={0x8b, 0x3, "38a1b20bb7379ccc04426619309260ebca21c740e040a4afdd1464670194e77dd43c59d40ecc664621842575bc6d5456664d20a6c5b12459e55ce266c4f1f41b7cdd477d98c16f020e248d99e2befe311ee2a96fde098e244ad6c94e5bb47b39d57e6b29edc2b494c268d322fe1e91bcd3d1a3ee0a9d27d5d5dbea2ff814a8af3a2ce599327c396925"}}, {0x5b, &(0x7f0000000680)=@string={0x5b, 0x3, "f5197b151b2cb03d3576030e1830fd39b6cd63035b55f872fa4b8931ebf8c63ba587697808949d203922dfac125447866f3978904877eddcd57d8ab76c24d05d25eaa55cdf068f4e6f46e8dcbcb01bec599956b1f3babba4bb"}}, {0xff, &(0x7f0000000700)=@string={0xff, 0x3, "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"}}, {0x99, &(0x7f0000000800)=@string={0x99, 0x3, "a5f19d7e1330e1e5a443d1d0fa3085a46f7696aef6faa3af7135ea1c5817da153863883070072b18c0c9d87a0a5e42e02cd085109896ccfcbc924689b0e6f595eca0f95e37f567d553152bdc3b28abd7c98c18053640811c159e33741345fd8a3bdc51d90220c1eabc4ed2a466569f35581ddee28f33653350c34757df5abc0fccd9ca4cd809216ecba41e66ec9044ca900545204171e2"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x827}}, {0x84, &(0x7f0000000900)=@string={0x84, 0x3, "9dcc981948e9868611147c08e617ec51c6e9f15e5714fbc37d821ff5516b5ca0168b841b9e76a05fd32319f46391d4084944f7ca4b5d567c82f3c9c1e6c7e2a0dabfc02410c838008e006d953474368925e7fcc0d872374817603bc97696d87862c514cd740eec36e905caee58fff7750a5bbf01826f86d9589e8f5b01e5284bdf15"}}]})
syz_usb_control_io$printer(r3, 0xffffffffffffffff, &(0x7f0000000c80)={0x34, &(0x7f0000000a40)={0x0, 0x12, 0x16, "b87f18f4954762317782133d52bb2b6d789c5c4a2bd8"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000b00)={0x20, 0x0, 0xf7, {0xf5, "7dab81431a0a7177839270b253994202a112a33f5c6796a51267ff001673cb26894b87776802f70be9e34fd87bf817e6ab48bb64c2d5b66daec029bc267071683329bd9b1ab3592c26cf10c753797b12184a548fb66affd6a6ccbc625487e0f7cb323cf78a90b640831180ae866e085c374a4807a30b779a6c75cc6104d98a3295d4c7204667edb12d532176835adcc9118abaa842e49ea25c8bf0149a583c01289f1f772f8668c233731e56f8f909a383987dcaa5fe4c45a7c4640305c0b81e85f913ed87f29bd19eebd503b7ee85c2ed6b7fc2ca7a4752f5943882f2868f0af11522983f75ac46e252709c631a53e65de8fec753"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0x9}})
r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000340)="81dd8f")
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d202"], 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="00df44100c76")
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
r5 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0)
syz_usb_disconnect(r5)
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}})
syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d070000000000010902240001000020000904010302030002000921000040132218000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x3f, 0xa7, 0x40, 0x50ff, 0x2657, 0x5604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1d, 0x7, 0x80, 0x81, "", [{{0x9, 0x4, 0x5b, 0x2, 0x0, 0x2, 0xc, 0x7, 0xb}}]}}]}}, 0x0) (async)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x3f, 0xa7, 0x40, 0x50ff, 0x2657, 0x5604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1d, 0x7, 0x80, 0x81, "", [{{0x9, 0x4, 0x5b, 0x2, 0x0, 0x2, 0xc, 0x7, 0xb}}]}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x5, &(0x7f0000000080)="40002048d6")
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x3e, 0xf6, 0x35, 0x40, 0x4bb, 0x951, 0x6549, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xbe, 0x0, 0x20, 0x9, "", [{{0x9, 0x4, 0xf2, 0x8, 0x1, 0x88, 0xfc, 0x7f, 0x7, [], [{{0x9, 0x5, 0x9, 0x2, 0x20, 0x5, 0x8, 0xfa}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4) (async)
syz_usb_disconnect(r4)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x66, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x73}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x81, 0x35, 0x81}, {0x6, 0x24, 0x1a, 0xce, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xb, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x34, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x3, 0x5}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x30, 0x78, {0x78, 0x11, "8669697016efae37c5ea09fa300399c235deb5956f8f4e034eaed0dede08b8539b60aa088c26d8a3d34f2bd6ddcd04f2f44bc3a762f65a9eed9d4e7ae5aef1371423c120ffdc055d67a425d294c53cb92e02f91d9b116b37cd4d02ffddb65b55a133f349c76b92566ceb20713fe8f9916c89c351239b"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x17, 0xbb, "720418a8c277a7159e4ed5a574f9a27f3d9b72a87f84129ae708cd507a10202f0076d68e7ebab9e67c84483837761954b545694fe5b213038d265e8ee5da53aa9cffe500b961e0783d332e380297706dde5a35bf40f9f18f4759eceb982dbdb336e510b122ba7955f9193e10598946bd1fbf3dac4ed30f76d0453eff0ad227e917ede14cc9ceca41b5132f88ff834c6109a36435c11eaa53d618bab30a2335b434d5a2310c124b6cfb76a621dc4b2cd5263629fe7cded850988102"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}}) (async)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x30, 0x78, {0x78, 0x11, "8669697016efae37c5ea09fa300399c235deb5956f8f4e034eaed0dede08b8539b60aa088c26d8a3d34f2bd6ddcd04f2f44bc3a762f65a9eed9d4e7ae5aef1371423c120ffdc055d67a425d294c53cb92e02f91d9b116b37cd4d02ffddb65b55a133f349c76b92566ceb20713fe8f9916c89c351239b"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x17, 0xbb, "720418a8c277a7159e4ed5a574f9a27f3d9b72a87f84129ae708cd507a10202f0076d68e7ebab9e67c84483837761954b545694fe5b213038d265e8ee5da53aa9cffe500b961e0783d332e380297706dde5a35bf40f9f18f4759eceb982dbdb336e510b122ba7955f9193e10598946bd1fbf3dac4ed30f76d0453eff0ad227e917ede14cc9ceca41b5132f88ff834c6109a36435c11eaa53d618bab30a2335b434d5a2310c124b6cfb76a621dc4b2cd5263629fe7cded850988102"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x0, 0x0, 0x6, "021c58906fbd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x0, 0x0, 0x6, "021c58906fbd"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0) (async)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000009c0)={0x40, 0x9, 0x90, {0x90, 0x11, "1fac6bfb287454278b389ce356d37383c6ec1c2016397ad3b9d1a76e8b519cd8d5da667f1083c277166639a7b7bd877dc4bd1d7fd0e3ea77cdd6a0477c00c64281484d0173345951f6a5e96e87d35e01a1712a8bef0519645f6f2109ecb3c9dfe8e87497a17ca8bf90dc378a108fb944fe2e9df75d8ab2ea87ffd153141463ec07c762b2d573cb9a734a31757721"}}, &(0x7f0000000180)={0x0, 0x3, 0xba, @string={0xba, 0x3, "c8962143a01a905de61e8782e84acb882b1f37fd32c9004a497e2539f4c57f99c7a792e58334fce2f7998c75868a58c049dce8b61947ee56ff9e6612e208c49d9b1c979d6889afcc2b1daa0225d80a8924c1a3347319a9c935b340dc0fa25b799c427e469a6cdfdcf93fb4af3370db54ab697d1dec9d6b10f1a75fc5f17a31af1af8cee670980f7f9efefdbabe000d2f2888e3b91acacb2a00bc9a57ea7b4197f09778d3a32ea50a7f233a47f24eb0fdf4b9f2a089b7bca5"}}}, &(0x7f0000000540)={0x44, &(0x7f00000008c0)={0x40, 0x0, 0x61, "566570971ed2a6fe035129af7ebeb3b71be3984aa5c0bd62f4ee03c82a76036cd51fbb47902bfeb98995cd6aea2ea7230138c19aac65fd3cc49874d374fe836a36c079a2788cdc488f5a8d7f2ed4d806f84ac991a06ffcc99e6ceba9b6ce55fd1c"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'F'}, &(0x7f0000000440)={0x20, 0x82, 0x1, "8e"}, &(0x7f0000000480)={0x20, 0x83, 0x2, 'P%'}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "c48b7f"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "62f7fb"}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800f3ff00050080050945811302020000000904010000020d00000904010102020d00000905820200f6f10000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7f, &(0x7f0000000880)=@string={0x7f, 0x3, "3f10515202b1b0f10b09480ae79121bd74f10108ba026aa74eb8c93d589b95528977c28c3344eb08549bec60d334702a5605fac2cde0735df84b1909d5c82de3de12cac3177dea868543e6078bb2feb4b46f159477aa5a1232d0a67839fea96c9dec8108710f89f124b3c237cd766b37671397750b28a2fa5f431afe2c"}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="2011ea000000f17ff4a9181a194e791101c404051feb8123a0e9266a0c73c2eafc526afde2ce43b9e3e5f7cd7b10c6e57c46458b5fed6e929a72f9eebc91ac634fe09e85df925efea11b00000f1fd9f5ecaa1130ea30048455080fa646956c27785188a91605029692f133edf659c8ff71ba631fa66c3da202a7008de00b7b335d42994862dd7bb8dad3155e6956033913611ddbf9e38f6f383cd394db32b066606cd9b05912dafb774678d160d3d0c8e6743aae11739bc2255d34ef32e26c0af732a8b2e70a5a0b19ca0efd4ce8b45cf71f3577491ae08075072fc5d20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xdc, 0x7f9a8da25af635d, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0x8, 0x20, 0xb7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x7, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x8, 0x59, {0x8, 0x25, 0x1, 0x80, 0x30, 0x2, 0x50f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x66bdf444f7d8ee41, 0x9, 0x5, 0x8, {0x8, 0x25, 0x1, 0x3, 0x0, 0x2, 0x9}}}}}}}}]}}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000082505a8a440000102030109021b0001010080fe0904005b02070102ff0905010208007f81090ba9ee2b9c2d"], &(0x7f00000007c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x9, 0x4, 0x68, 0xff, 0x92}, 0x11, &(0x7f00000005c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x8, 0xf000, 0x7c}]}, 0x4, [{0x74, &(0x7f00000000c0)=@string={0x74, 0x3, "83c4eb2e0a89307891391590bf1319e61cc590a824d4e7974a4f72b18d6efdf5adccd700b4558a2d247bf3ca79848f2cad6eb1011c8e058fb42dc3f3909f165fced2f5d5a27c8f45cf293944a5162fda4a4a086c9f543f16d995c87fa11c452535eb71539656ff62e6bdefbaaac87782247a"}}, {0x0, 0x0}, {0x6e, &(0x7f00000009c0)=@string={0x6e, 0x3, "e194e7b25fdfad73983b6dee3303ce73fbade97232bb80d56e458ba2dc74f74d53afe15d8753629798e5e2502cd2ebeac49b6fd76fc5560d1da9954d8c4f2c221b9fc4bd83f2f30eb6ac9734682a7361ce745a5f3195285d6a9929a1b32a89fc6446d82321f9d938afc10aff"}}, {0x2, &(0x7f0000000900)=@string={0x2}}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f0009"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x4b, 0x0, 0x0)
syz_usb_connect(0x5, 0x63, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0x50, 0x27, 0xa0, 0x40, 0x5c6, 0x9235, 0x32ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x4, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0xae, 0x7, 0x0, 0x61, 0x31, 0x65, 0x1}}, {{0x9, 0x4, 0x4e, 0x39, 0x0, 0xc1, 0x9c, 0x84, 0x7}}, {{0x9, 0x4, 0x61, 0x1, 0x3, 0xff, 0xfd, 0xff, 0x2, [@uac_as], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0xb, 0xf7, 0x7, [@generic={0x9, 0x4, "f8369a555a83d1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xa, 0x5}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xee, 0x9, 0x7}}]}}, {{0x9, 0x4, 0x44, 0x5, 0x0, 0x53, 0x82, 0x37, 0x8}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffd77, &(0x7f0000000540)=ANY=[])
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x61, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xefb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0x21, 0x5e}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x6, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x3, 0xe0, 0x9, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x89}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x15, 0x10}, [@multiply_unit={0xb, 0x24, 0xd, 0x4, 0x8, 0xd1, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe6, 0x7, 0x9, {0xa, 0x25, 0x25, 0x8, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x0, 0x5, {0xa, 0x25, 0x25, 0x401, 0xf8, 0x3}}}}}}}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x82, 0xff, 0xf, 0x20, 0xfe9, 0xdb78, 0xbf5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4, 0x0, 0x8, "", [{{0x9, 0x4, 0x7c, 0xf1, 0x0, 0xd2, 0x89, 0xe8, 0xe}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x20, 0x21, 0x9, {0x9, 0x2b, "9f3bd6b4b3547d"}}, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0)
syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000300)='\x00')
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f0000000240)={0x20, 0x3, 0x23, {0x23, 0x2, "131f68096fa0780f8464b4473807665f424cbffc088bd85aba477a444158001624"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x8000)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000004400)=[0xfa, 0x1e8])
syz_usb_connect(0x3, 0x2d, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xda, 0xff, 0xa5, 0x20, 0x413c, 0x81cf, 0xd409, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf, 0x9, 0x8, 0x2, "", [{{0x9, 0x4, 0x4e, 0x4d, 0x0, 0x72, 0x27, 0xe4, 0xe2}}, {{0x9, 0x4, 0x2, 0x4, 0x0, 0xff, 0x0, 0x40, 0x6}}]}}]}}, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902010000"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRESOCT=0x0], 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_ep_read(r4, 0x2, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0x10, &(0x7f0000000080)="00000000b4ffffffffffffff34047000")
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000400)={0x2, 0x100})
executing program 4:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231346e53f070c0000002a890283449238"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x80, {0x80, 0x31, "1eec03a41112cc4c33f24ea19aa08f373f4329d0d3278a4e58f90ee185ab8c019affcd66e7c1eb6b1c2fe9d75a60e4c205dd43ffd7648b803516c8d466626d8d405231d3ef39ab6fc181497cf0cac373e5d84e31829ce1f7771c7d3053e5d10dfd7e9370e5ccf227a759100f6a9afd4dbeefb3eea60025f3d121d18b015c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000580)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x9, "510214c5"}, @main=@item_012={0x2, 0x0, 0x9, "2ebf"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xa3}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x26, "7a8e292973090293d3668ef00c52aa205eb5174ff68b8669d846a6fc43e37f24f4efb901fb29"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000400)={0x20, 0x1, 0xa9, "39824b32574d8c794c21b2c0490f40654f5a96c6fc49ecd0d8b95d5f6fad6d04e1c88463b2484b1706071c811582c5e661391072367eb3e611f43a5f4b8801b25832ba1aab25b09c171d2f993bfe45a2a1402740b8a957c7956802f210b78b8ed324259fff769d99b6330351723a25bb33c2c15c9734f2a771f5acd7a34351203fe8576f3999cd49871d7101c9a958aa0ff2f4d1d9e752e97b45ab2aaee9276f0e0b22f7534d644624"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}})
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x400)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000240)={0x0, 0x23, 0x1004, 0x49, "aa6a68023bdd614c49c92c18ec3b3fea0af894a2a4f16622d6da72cfd3aa8cae"})
r4 = syz_usb_connect$hid(0x6, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32=r3], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0)
syz_usb_disconnect(r0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000005c0)={0xf5, "c7e4948d20a75ffedd83793150df3508e0a28edc73bf545f0a6987ae5c9ce241092120f2f6fc81c3dec0ee8620e083ca2792834e5014832d5daa7e8b8fcb5829"})
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000a40)={0x40, 0xe, 0xd, "b123c758e034032aa336afcbc9"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x48, 0x4f3, 0x755, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xd0, 0x10, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x3cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xec, 0x80, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x29, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x8, 0x3, 0xd, 0x40, 0x91}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x5, &(0x7f00000002c0)=@string={0x5, 0x3, "96c7b4"}}, {0x59, &(0x7f0000000d40)=@string={0x59, 0x3, "02b733429b65602c0d04805dc338ea25ef64aa65311348a3561bbdfe649d1d185da08269ae48999b333d231fcb44aa66cc643b58705e4e9ad7313a150498f0e10133ceea327db939e4d72666209bca8b33036089917998"}}, {0x61, &(0x7f0000000dc0)=@string={0x61, 0x3, "862b66ad06377089887469acec85fad623ce296e8ee0dc379e2c14e1f24feac61e33d5894481f53a1c0b8fd57fc4823973f2c1cb3e0c69e0b39b8993417e4aa1e03e571a0055496ab7739207e3585b6d895875cabb38cb2776e8af00ded696"}}]})
syz_usb_connect$cdc_ncm(0x2, 0xd7, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a44000010203010902c500020180903b0904000001020d0000052406000105240007000d240f010200000006000b004106241a0500286924134078e8732b4ffba0c8fb977cfc24311df8afe5d3a015eb4be222588770c141409f246bd2a8696810c60ed62c309959f14abe0e4a155179efb418fa4e04b422e09d80e98b9c1dbdfdb21e70f3ab41217deb566d5bd9d20784bd9e08d1bab7b68118929f04"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f05106605480200030109021200010495708109040081"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x3, "2660a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x6, "56f1b39b85be"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000340)={0x40, 0x3, 0xce, {0xce, 0x6, "3653f308bde11c5048a0a5fec299fcf58662dd8d99949e948cedf584e5bc7a253fdb5cecb00e0812229b4bcd23076b4f50b35d7b414a6c5fa48a663ae1c3bb003c4bcabf685f9d4fa75fec8b7bbc59971ff86bb3ca76a1b76572b46d17b32394038ea9604b2535586f9f487af59676d30d8ec21179b18ae262a19a29c7872cdd4afdf71b52c7110c15169c7be833f39c5c16cb0073419021defbf3a062ca691e5343f48ed8be7034c81285733bb531ae8f8d33cf32c8ef9e448c89f31b2344056312de621f122a5f475b02d7"}}, &(0x7f0000000440)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "12db8c640088baf25d013f1ec0565bf9693da74f5d070bd1239982a1e2e9aa58c26395d320f3e42138bad9a63bda8cc76349d770e7066124178b4fb6c3c106d66f12d4f9ce0974d0642f1fe6b6fb3996dc28ed8ffd91a8125478a4628bb0ef50a6b2894e49f0cb208c88d1bb25c96beb22662eed1e1712e1134e61678c86171f0ddb67745f57e5c6745e8f2e8e82697e3c5cb474a697a067d09d8d771ad7c4a045da7aa913b9751e10fe25dfd14824e95a78d3be182915aaafb20552a31e030873fb9db74ab02dc4fc2552fa211b35e067330d88"}}, &(0x7f00000005c0)={0x0, 0xf, 0x6e, {0x5, 0xf, 0x6e, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xff, 0x4}, @generic={0x48, 0x10, 0x1, "ae42f5968973a1c4d43e989e6af78a29e5a6e28afca2c15e8c3f6970d97b499d601723e6bdf197a93d9c171454b2e95b9f399bef1dc9f652721e77dd6ff63dfe3a8aede224"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x9, 0x197}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x9, 0x1}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1, 0x3, 0x4, "9382e8fb", "16994891"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0x2, 0x3, 0x9, 0x4, 0x7}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x53, "d746d5b91e2b77cda011ea94c90ea45a4fd23363fc5599588cb087a00f53b83a2d4c1afe842956db3471005b842d686cf3591150c3ee42cc177afc8306b3d0aea4a53436351817293da0fe64d8da203f93818f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x80, 0x8d, [0x0]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "894c"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="2c8bb1be7180"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "e230"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x9c}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x3}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x340, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xe1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x8, 0x8a}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf8, 0x5, 0x1, 0x8, 0x8b}, 0x20, &(0x7f0000000400)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x15, 0x1e, 0x2, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x7, 0x9f}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0x3, 0x6, 0xc8f}]}, 0x1, [{0x66, &(0x7f00000004c0)=@string={0x66, 0x3, "16392500efcbad2c661e1c9bc970fb5c4aafbc97509fb316795af444145ed791a1a835e8d977064d02a94847a6fe10cf059a79e46ac25fa4ee44fb9df77f5dbd6b9042fb1f66786a72a5adbd90f51343f5b1beac21ba8e2eda712468c5d5136cd6fd7e5a"}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x20, 0x0, 0xe2, {0xe2, 0x30, "4f801109967fd80be4c9808004caaad0dc6b245dcc7ced230ccd867ed5c29cf5522fb1355f3251240a718f875f8429ea78ac1bca9a5a36d4083b6c2918e1166be46e9f23f22a8481682ef1fd9ad694ce662c1e2b432b1f01ebf713e02b768b28c0e31ccb595368328324f6e1e7eef8561cdfdc51ea043b98c2bac6b6b723599ddaac1010db1ceef991ea0d870de36476e20f4871589ff8c39158fc4fc410ab441594b46018dfe91a50d331bd678511763a498003bbed285839d014f3a5e4bc5b63b230edd407c683a72f1611fb793535b66a3b9a1e584bfdb2d71b15d8690237"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c00)={0x40, 0x31, 0xda, "5e70195927381260b4b0afb48405a5e89defd788a60db842ddbc76e053c9deb4ba98e08886d4560d8b2c74dfcdfa598e5acf8426f5eac99e1be968b045ba4bdfcd327e17d12b3df750c041999512badae297972d31c53e9a884ddb6a2ca8a975b647a7741740d70ed6690e6cb351191f0ace7b9b990a988a82d8f88d1a296b0c07460e1ee29d6a233937dda8cd5699a3296de1f9d715ada63fdcf5b2be32f94411ff452aae796fe42f982cdab1ce6ea1c4daa9c150650e3864d99e790da56c128f2ac73c264f0cb1910e77cc049362339502938824492922c5a4"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d80)={0x20, 0x81, 0x1, "db"}, &(0x7f0000000dc0)={0x20, 0x82, 0x2, "d652"}, &(0x7f0000000e00)={0x20, 0x83, 0x1, "c8"}, &(0x7f0000000e40)={0x20, 0x84, 0x4, "f405cca8"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, 'yT<'}})
syz_usb_control_io$hid(r1, &(0x7f0000000780)={0x24, &(0x7f0000000280)={0x60, 0x31, 0xfb, {0xfb, 0x4, "3a12f42befaf46da2a43b72f117efa6a975893bb36b0b69d95cc0afc6f21ddde9ba769475ca91d9260528c09b1ed901cad2e74a5bbfbab6db271a1566235970c3e6ccf300b2566faab07f6aaeaec9938cdbdd63e3e297e0647f5eb8ce8082e91793977b1d19fda037169d72a6e42153c1ec7c9be06573b042d3ef5bc19ecdbe9fab151905b1611c41de45adbf4df44fe2379571b18273d56e5c20f7e7c8c575d7cef172cc04e89df925e6108f0d3b5953adaac5e5b0f9d9391da56eb96773f086d05f4da357b4d61a18903a684ceddd30035c5dc51b8946b4394f5f2ed80e832411f2cf2ae666f1369f674c03c20205367034ced1e91fbe984"}}, &(0x7f00000005c0)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000700)={0x0, 0x22, 0x2e, {[@local=@item_4={0x3, 0x2, 0x3, "beb31414"}, @global=@item_4={0x3, 0x1, 0x1, "fc901c7a"}, @main=@item_4={0x3, 0x0, 0x9, "73dfcca2"}, @main=@item_4={0x3, 0x0, 0xc, "4b9af872"}, @main=@item_4={0x3, 0x0, 0xc, "0d479a4a"}, @main=@item_4={0x3, 0x0, 0xc, "bddb207d"}, @main=@item_4={0x3, 0x0, 0x0, "106a71e9"}, @local, @global=@item_4={0x3, 0x1, 0x0, "1421be2c"}, @local=@item_4={0x3, 0x2, 0x8, "5a1ffca6"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6e, 0x5, 0x1, {0x22, 0x306}}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x40, 0xf, 0xb2, "dae7c018812fed2c2eb8a7d78cf2f6045fbdc32ea25fd81cbcb58194d6a46eb71eddb16a7a4f258874c0308c417f64989903ec7736e741bfd438dcb49765f2c703d7025ace47bf3a3b9931b5f3d3ad4f7ccd9f5a13c3675a97d3abd4946f52632e5b024e20da88fc18d46ef95afcc4133410f674b181aea46de604f70b2c43cf159faa8b83cd782096401c9ae15d31a57dce281300d25b885fdac497600e2d3c038a344b7fef906bc7eb202f38e7b3b116b8"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000900)={0x20, 0x1, 0xea, "77b2c77108dcb9d5d72b4e7326e1813af4ded7916bac26d858d8e9620059a0e48dd8971be6959bcac66ad4448f68b4569a36c21125e53e5c464ca2a9d8904aeb9c537ed14253a4283b9fb08a3648d7703ff8249f6041d3f4bed61c4cd50d1adc149fef3e2c69f12d55090b045a2996185b6e721fa1b482af6fdfc7a0b1afb6b1c99f71634b0f014e5781bb74db789e8326e6c126098ea647d6ecc02900ef3cc027bdd6c66572a8de9d022a49fb56a1a22c8fa7c1f96ed7975b053ae9ec89be9e906931a298a98d287aca4365bc94395eb9839209500cb782f634212b2a4b7f2350f79dec57e112131b0c"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)={0x40, 0x41, 0x82, "eecedf54273686b3028a2a049d11311c9873238b1a12707f1d0d060000009b6b67f7ff28366da0089edf98526792a7435f73ced4f3416bee2358e2d08fd17771eb13ec66a515bb2693b8372a379ada5dcec64ef4cc536d9bba2c843bfeeb075e64d5c84ea939e396f74ea0cdfdf17210cde08f8823bc37922279d9dbb831053063de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffde6}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "1800", {0x1, 0x7f, 0x9, 0xfc, 0x8}})
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "1067a27c", {0x3, 0x100, 0x0, 0x7, 0x3ff, 0x9, 0x5}})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"])
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200a030000004adf8516bd9910e91aab612bf3a0"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x39c, &(0x7f00000002c0)={[{0xd5, 0x4e00, "b3fb7581a76bff1a341cf7ac0012199c7aa29e9452c52bfbed17fc93866ed68fc0996655132fb9f382755b1bddfc7859af33bfd77510cb6e14d19c1fa657de16aa607e541d12278a969ab84505fe342a04e4bd4b3d701cf7b34786c9d88862f7423bc454e5d307000000e6be76c4e40de4a2846833652fbd9900345e9b27bde6bc89fc0f4e5b7f4b60fd40d533773b92d45cd5258f6fb4231fa15568a2f31fa6420a1911c8b1a6494b92919c9fc9dbb883dfe80037ee076708f27ba6b026343738da890ac2cf495ed63144be5b91c175fe08631aa3"}, {0x72, 0x4e00, "ff402a8ba55120dc08965b1ab3eb6020484a48c05b52942a06b2a4d69a90f9a25da90c8746f7c14ffba01b492436d2f8aab46045910b615d576a3b346033ff56881e0c1800abe7aa8e8d4a58b97d8ceacb05591b1ff65627aea45ff2c13d7e14612d5bcefeffe500a8568e8252e7d2bfaf98"}, {0x1cf, 0x4e00, "80782633cbd6a0b44ea98a75e46fbb1df5967a8924060ba5727cb4153df925efc17709277c1db5ae942e8235862fe959717931bbfe2feba7d473d2d97d5c502342d3e5a0d7d20a1be46b86478d4308c4dd6e8d51055bd92928806a881891eb70c51af2b933b02a4987ca4728fefc786b6f555cffba912ee4e5223a3863aab8255f63451d6b1f2138b9bdcb0b0e2b74d88c3d8e59141dadb234ce950191f5b22d6b360000000018519e30bcab1fa7ef1944a7dd8f2a2607fa36904a99760290f7aa4ed53a210c92a760e6408f312fc91f72dce5858b38681555a1159eb40232d95b28456918130b44e3953797f0bfb973a3b69fc375f10ebffdf89022000000000000006e98be499f00a67ac49f17c8c323fcbe31a25e186989b4b233a4d5232e7b03feded2d6ce2f4390afe66c6f1049c8319482d9d907d66be93bee2116813667acac742567857b9c17ada74f078f753367543267b48d4ce94575cef03bb024224039c5673634f1b31ea014c820ef8a24eb800dc33428c3177199c5bdfe3512061e9ac0c9f068cd09e4aadaed8011fc5390013c2a084c70afe311f05e255e72559c629921ea3a8537752df49f987c522fd22f5660f4eb560446325161adde80a03800"/463}, {0x70, 0x4e00, "9507e44f239b2c4f36326db7026b5fef863ca01909d64756e9c437e6e82f29df21dd5864dbed1c191a8ef86912e74ef5c87f46360389b3fb454222eb145592c2e5e43e360ecbfb3254f03fb956a799c6b248b021f965911c04f65b6cb199058afc89d363afebfdadb1130d567aa3e31b"}]})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000013c0)={[{}]})
executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x3, 0x52, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0xf7, 0xa2, 0x85, 0x10, 0x19d2, 0x178, 0x1dea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0x6d, 0x5d, 0x2, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x3, 0x1, 0xc}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x81, "dc5e82fe"}]}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe6b}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00N\x00\x00\x00N'])
syz_usb_connect$uac1(0x7, 0x71, 0x0, 0x0)
syz_usb_connect(0x5, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xf1, 0x60, 0x91, 0xff, 0x54c, 0x38, 0xea99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xdd, 0x3, 0x0, 0xcf, 0xa7, 0x77, 0x80, [@generic={0x0, 0x30, "9b127fe465124b05f05b4d60ae7bfabdb3880ea43954d148f2e3fa8e6745dbacc24e01eb1e1675a2e1a7c906119ab2995ddfba5a838a4497cad5183638ff4184a923ae54e4618a07bda6fe175e66dbe49e63f25ef5dcea7b966a69caf4d21eedd324f7571d75b17e6c810bbe9fc9baf66f1be3d46f08bdcbe24819baa93c9dee5119ce12286e6b0fa0837d20d578fa8350235cc9694a0bc85d2f997bfde8492f09a58f0a70a5909eb3c19129fac5a31b672f56bcdf162e30f8"}], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0x9, 0xff, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x7, 0x7}, @uac_iso={0x0, 0x25, 0x1, 0x8, 0x81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x6b, 0x8, 0x7, [@generic={0x0, 0x1b, "d51998c2417fcf58610aaf328e0db822cbd414a5569d6a6171de83945ee3497d53ed61e56507b7b297ecf4b6d5a11e8676adafc317d92e0af1e54e55fe0587764dcb9b894ea45ed77cca7e14c0689a050be3846bc0914144c5863f8d051978ae665613fea763f45e562cdb1f48e8ca3db8b911acb5ece54985a339c0fe2b23cbaef5cc1073"}, @uac_iso={0x0, 0x25, 0x1, 0x8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x5, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x1, 0x10627b5ce6a3df82, 0x5, 0x9, 0x8}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0xa, 0x1, 0x6, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x9, 0x70a0}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0x8, 0x1, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0x1, 0x4}, @generic={0x0, 0xd, "40de50f89e6a15776280028bc4f625d5a6f2b152294fb98f1e05d5cbbd059542b709affd378571edd7c5b6e0d528bab605e6f8d0821c00002251cc24ee9000b6d7e2d93374d56859a3c38518cf4d959b12cfe00aa966230fa1384b7bbf83248d1a9684c939167f0534ae01904d2354a7f62530e38f2be26f6e7d39"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x92, 0xf, 0x1, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0xfe, 0x6}]}}]}}, {{0x9, 0x4, 0x61, 0xe0, 0x0, 0x4a, 0x90, 0x51, 0x10, [@cdc_ecm={{}, {0x0, 0x24, 0x0, 0x203}, {0x0, 0x24, 0xf, 0x1, 0x5, 0x5, 0x5, 0x2}, [@obex={0x0, 0x24, 0x15, 0x18}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x7f, 0x3, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x4, 0x199}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0x3, 0x38, [@generic={0x0, 0x31, "6961bdb9e80a6bc96aa0c669469bbc947cf952ccc17fa97fc538be59d4dddb9765df0db3034221a465f09b8fe5b97027f84cf2f72bcc64194af9595464ab883a832aea8864a7e9c00b490ac937b46056c7f374b755241aa8c5a853d6d3d707d8e12aa0f273a0ce65182c6aa4644d6bbec60b6b1e93f2fffb75196c3db75a9df1fa2f3bb845e321bc117f0da6b02599a0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xfb, 0x4, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x40, 0x0, 0x9, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x5, 0xff7f}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x6, 0x34, 0x7f, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0xff, 0x40}, @uac_iso={0x0, 0x25, 0x1, 0xc, 0xc, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x4, 0x6, [@generic={0x0, 0x8, "34720045fd22beb4f46638b816f5a284ea1c751148e1cb5e8c629fc6f242da4c54b4617918c098a6e524d080a881864aa840617ca4afb9c1c0366978e70c754dcb707b60fe56e7dd16168c150b9e3677cddaa325a831cc066837c9b337b0f036db08080fd6423d8c32c53a93e8e94f33274798f633c9151186d699f7126a2323d29b2e7babcdd30e236406ae960a1d21efd3ade397c342853299d505a88fb85488cf13d30959ea583b0976de1ee4b46e94ac2dd94565b228671cd619c74e39155da93893cc153b050c053e2363f54a977af141ce81cdf945cc4e845441701a15710b0f6d5c74"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8c, 0x2, 0x4, [@generic={0x0, 0x31, "e75ade65003dc9c1ef1e8e92f348328cc3fe14d96ed0a29ac286d6cf02c9d6ca56cd408c5b887608e8315acbe481185065ea083f025563263fa5408a57b3fce3659b591477f12ebdf268c752f682b4412f61856f6002e1ff085dce0f319574ef294213bd00e7a59631cffc838e9761a6db8be2e7bebc263b0028c396253cb6dfeceec662b7cf708f91613ae7ca60c60d1eda201bd3c277bee0cddc1e500925a7eeaa55134f3fdeed28291c1211528df9879d1cf9a2d05199e3745accb9ca3a56e1dcc75d3d9a048015ab051889af8302eedaa4d838a65feb663e954a9563dd2574faa23587d5b3eb484e9eb72c31e0683f3cd0c8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x5, 0x0, [@uac_iso={0x0, 0x25, 0x1, 0x8, 0x0, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0x6, 0xc}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x2c, 0x7, 0x7, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0xda, 0x2}]}}]}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x155556cc})
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f00"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a112171095102a15f4f7010203010902240001000000000904fb00026c5d6500090505820240ff2919c2b990fdb6d91001fbd24890529e3f38ca04bc6cda135bbfc5c9d965ef58480da4dfab56f58bc5df4dfcec13849d6b04ee83f6cca78626758e4a0731e07f9e99538a"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="200801e15fb19ff324e94674b6c097d6fd45628b93d14c75925213155e684bdad0d9ee798169461e7c25a37378983153c6aa39e09bef79455b254d5cff13435de8c5e12b3c2a3732cc6ad98f0c2c73416b74d2fcdb2653e75f19d48c22cc26a0b429087f17ba0da6515690537f526966e352f86a349eb60f927cd368b4d4cc7d7bfa9dd4bf6d30a898dc047f2ab00c7e7ca6a4372379443dec515f06b9d705fcde379d331810140bfdb5236a8d897d07dcdf3b1baf628d62c49e00c97cb8ceaf3b2b36da6702f502a49f61a3e8e619df4632b40e14dd6d4f9a8b9c660ffa3788d3de3eb2c4454dcc32dfb0fabecee29affe8baf5ce05"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xb, 0x7, 0xa, 0x7, 0x2, 0xc00, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1846, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x60}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12013f00000000407f04ffff00001622fcab00000001090224000100000000090400001503000000092140000001220f000905c5e277b4ee7417c1089dfe0c8ad622d140ec56848018e14268753c59ba75fbbe1271af5abbc2325f0da81aee400fadf5c62203426a658ce695bea7a2b037ad30cc79d4b26868582324a8df06d191f93123e0a6e64b5cc533db973f30d15b2c6d90edea4d630766714ab9cf7ebd", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000140)={0x2, 0x200, 0x4, 0x0, 0x104d1f2f, 0xfd, 0x81, 0x1, 0x8, 0x7, 0x79, 0x5, 0x8, 0x5e})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0)
syz_usb_disconnect(r3)
r4 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x107020)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x543, 0xe621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xa, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x81, 0x1, "f6"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "9b"}, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000003670b91e2c907a342931710af71de8334858013bca66bb57f8d847ee2a9aa661652fa"], &(0x7f0000000340)={0x20, 0x84, 0x3, "9d957a"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "c338a0"}})
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x23, 0xf8, {0xf8, 0x22, "06467cf553b9685b3ba2d0e74d1ee5efbaa39194dad1752a23aecb9481abac75f5495b3ea5fb5dbd54bae41a1fcfe99faaa086b86fee638417dce65bdfdf406cfa47b4f55d15cbe1c833ba960fe56f0652a9c7feab970b89f036067a0db8d10e3e08425f0cb61eed989d61b4139c0a7a3a695bf8d519b5da6e8531a6c9cbfd4b77aefb679096452360a2fca97e5ef05956a8302f6377c8f1d66d9ee75c6b32cb5f3525299206a6dcd19bd1775bc3280f666baf322d47a0e5a5980b7618351d43cfb5001e09e6f0501a0738b8a3f025dbb14830512d02c29a21825bea5795dec79ec332ee6d9da7c03a724f9f2184d76a52c0de7cbb90"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x40, 0x16, 0x7f, "7119847c120ab14912f98a1200a78a80ecb4ece55afa758ce48768aa4b05aadcfc053b262e1b353a2adf7ba96668ad5b34646804d408b2219058bb436a957c403367b25813b32bb7c73ad66ed6bcff610cca21a26f652d2843930d17d0796e5c524e7bd60c773133546a89f22d070d159d89737926ad995557d46b69b6b90b"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x7e44, 0x2, 0x3, 0xab1, 0x3, 0x2, 0x6, 0x6, 0x1, 0x4, 0xb, 0x1400}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x8000}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000840)={0x20, 0x89, 0x2}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000206a05c600000000000001090224000100003070fbffffffffffffff010009210500050122280009058103ff030481"], 0x0)
syz_usb_connect$uac2(0x4, 0xc7, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xbb, 0x20, 0xc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x9, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x5, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x5, 0x1, 0x0, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x6, "25a75e", "b6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x56, 0x0, 0x4, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, "8f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x9, 0x80, {0x8, 0x25, 0x1, 0x0, 0xc, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x2, 0x87, "d70adf43ce7b6b090c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x3, 0x52, 0x6, "06", "88e5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xd2, 0x89, {0x8, 0x25, 0x1, 0x81, 0x3, 0xe4, 0x1}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0xf9, 0x9, 0x40, 0x72}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0xf5, &(0x7f0000000440)=@string={0xf5, 0x3, "abc217e49d61109098dd71da42ba2fb390aeed8338f5334ccd983ae24be910f6ca15197bb0330d685b3de998f3bfdfbb5e8ad6bdf384f0927a773e3c9673d9f702e8bb34632ba1cdbf152287eecf900c76688235b392a4bbc2e58d1f37df122fe8c282a6a090d4125230a0eb3e8b290332f7e506ca19729df5d95639153abaaf983b7c84bf7b9d9377db499389e0036db1a6d33deaef7683ee319b3bae2e92770637935bbf620c66501690becc7f5561b16346e7553bbf4115470f4ba7a48b7f66069eaca71c1469bd897176cd1592dc51f12f4b7c8f207aa3cabeed7e3c7b753e7eb3c0ddd37fb02acbe4c7d3563bd6bfc25f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="2004420000004222f17d3816e9bc787a4d4cdbb3f5bc62b1d6ad5a9a56381b21a60f9dba43b59c23e92812aeb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)
executing program 4:
syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x80) (async)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x80)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x1, 0xb})
read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/84, 0x54)
syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x208002) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x208002)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x6)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/22) (async)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/22)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x40, 0xf, 0xb9, {0xb9, 0xf, "95bb891bd977c5036575e6a810dd4a4083463560b2b2957b9120dec7909522e71f315496f0e1c368f649535a4c61bc1b0fe27bc9d9d643426bf797ea3e4e2959d0578747bb930703968442486bf735349bf70b36fc8d0846b1e46f27110e73b8dfcf257dfb59d86ba1ddee053075171a84289e22af24e0dbcd2071e742a54ddc45b22cdd2a06777c21b7cd0882d3dc7ff1aa1b86b94a009c6a89c8fab13c2924681fcfefc4cceae7b2040d4c5117e35675fa55863035d6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "1cd5e5790b5d120b7af0f461b9f2c4f9ff75994c3fe5288995f3b6b43e44dd7ed526bb932ee6229a60e9775ac1f72391b4d7d32c6e5365e5e32de452cca8037246f1ff6e97b157e0777c13b4e7ca43f1b3c7d852568df2d693d169d1d38e37197158c3f2c595e05247561931a5e9fc7920a7c2a403b1af7e2e1710e191c19827240a3654081bbec3660317113fefb300e7d3128bccee1339686325d95a4bb2eccc264fe652814649986eb40ad7b0ac42453199e6f80a387dcda54002fd479f57f5421ccaf671e10948e248f02ebdd12c123199aeb64d696f1467053b4102"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x40, 0xe, 0x83, "36f12d260b0496fbc06b69506dc83a2930878a443de597a3596e52479338c9abe10d20ab35a14db84674dc6030f420a789dbd569fa074d55a309e17bde3cdb5b45937dde63f9dbd43e7890f8807c2a0094665f2d4cb9fabc6280d55ff97610547469f7ae994ca74f2957accb184880f581da3cfb14a47f82417c111f016e711deaa49b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0xff}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x2506}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "3cc049a6c9a741b7db252d0fb8f387b1dae56cf864afa846550aedb02e678b4e40f3c3c91767d32c87e2f9fb2dea45"}}) (async)
syz_usb_control_io$lan78xx(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x40, 0xf, 0xb9, {0xb9, 0xf, "95bb891bd977c5036575e6a810dd4a4083463560b2b2957b9120dec7909522e71f315496f0e1c368f649535a4c61bc1b0fe27bc9d9d643426bf797ea3e4e2959d0578747bb930703968442486bf735349bf70b36fc8d0846b1e46f27110e73b8dfcf257dfb59d86ba1ddee053075171a84289e22af24e0dbcd2071e742a54ddc45b22cdd2a06777c21b7cd0882d3dc7ff1aa1b86b94a009c6a89c8fab13c2924681fcfefc4cceae7b2040d4c5117e35675fa55863035d6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "1cd5e5790b5d120b7af0f461b9f2c4f9ff75994c3fe5288995f3b6b43e44dd7ed526bb932ee6229a60e9775ac1f72391b4d7d32c6e5365e5e32de452cca8037246f1ff6e97b157e0777c13b4e7ca43f1b3c7d852568df2d693d169d1d38e37197158c3f2c595e05247561931a5e9fc7920a7c2a403b1af7e2e1710e191c19827240a3654081bbec3660317113fefb300e7d3128bccee1339686325d95a4bb2eccc264fe652814649986eb40ad7b0ac42453199e6f80a387dcda54002fd479f57f5421ccaf671e10948e248f02ebdd12c123199aeb64d696f1467053b4102"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x40, 0xe, 0x83, "36f12d260b0496fbc06b69506dc83a2930878a443de597a3596e52479338c9abe10d20ab35a14db84674dc6030f420a789dbd569fa074d55a309e17bde3cdb5b45937dde63f9dbd43e7890f8807c2a0094665f2d4cb9fabc6280d55ff97610547469f7ae994ca74f2957accb184880f581da3cfb14a47f82417c111f016e711deaa49b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0xff}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x2506}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "3cc049a6c9a741b7db252d0fb8f387b1dae56cf864afa846550aedb02e678b4e40f3c3c91767d32c87e2f9fb2dea45"}})
read$hiddev(r0, &(0x7f0000000640)=""/76, 0x4c)
ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000006c0)={0x0, 0x7, 0x2, 0x1000})
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000700)) (async)
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000700))
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000740))
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000780)={0x8, 0x8082, 0xac2, 0x3, 0x6, 0x1})
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x189, 0x0, 0x0, 0x0, 0x48, 0x1e71, 0x2009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x81, 0x7, 0x1, {0x22, 0x68f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xc1, 0xe, 0x5}}]}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x4, 0x5, 0x2, 0x97}, 0xfc, &(0x7f0000000840)={0x5, 0xf, 0xfc, 0x2, [@generic={0x1c, 0x10, 0x4, "64a49bc690e38dc656571977fe8927f5c4e872701776acad80"}, @generic={0xdb, 0x10, 0x3, "02c6a39a68b25e48e5c90eb4f107a4a312accd85b7cfc8a79a6216bdd90108d337d3ab1a1e749de04b620fcef23ca7ddcb250e6fe55150db9f46991fc8ca736af3f5677c269be36ca6aeb548f77796983dddb1921607f5bf84a46a9459db2e8ee6ff338f1827779537e79aab66b0c5bd84dc983d48dfe0d5a3a283d890516ab9d90de51255bd8e67ea4fbb20f915793f6953fcba5f9e73a07bf599cb5fc812faa57d7ffaaf8ad08feabe27041da0a447174d096f18b6123317553a9b0fdc05a4d6bd49eec147fe2236d83846a79843eaffdf306e8b1bdc46"}]}, 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc07}}, {0x22, &(0x7f00000009c0)=@string={0x22, 0x3, "984459b17f4f3f8907bef592350dac6106272cf0b24305db35392fdd80da0783"}}, {0xac, &(0x7f0000000a00)=@string={0xac, 0x3, "f5697b037c01816b769586f26d44ff3ef0f4b499863715fb741ad51df549feb5f09ae0e32656a8dea21de18712ea5cd8676116756b371371b4f52d3d9ce0a31c8dcb482d80f3767674fc8dfa7de99c42a40ece526390c73077ccf99c22acfe54300eefec0f7f41257036f172d1170279066663c7662115272efa0ad7ad1508163915519d863556faedaf6a0c09860bc812b315d25f56b0d1d076d784c819df8f66f89448ee2bd0e557f9"}}]})
ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x200) (async)
ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x200)
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000b40)=""/240)
r4 = syz_usb_connect$cdc_ncm(0x6, 0x7f, &(0x7f0000000c40)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x1, 0x40, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "986b"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x685a, 0xfff9, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x11}, [@network_terminal={0x7, 0x24, 0xa, 0x7f, 0x4, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xff, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0xff, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf5, 0x9, 0xe}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x110, 0x5, 0x42, 0xf7, 0x10, 0x9}, 0xc, &(0x7f0000000d00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x3, 0xbc48}]}, 0x7, [{0x37, &(0x7f0000000d40)=@string={0x37, 0x3, "8ba519fba162a4bf0bbc96baa4b0f24a3b6880ab834b369a76e3b9856ef39557c7e2f30326e20c0da31e4e793af2a2e0b0c07f740f"}}, {0x47, &(0x7f0000000d80)=@string={0x47, 0x3, "89134e0399c55b41c11f28548cb89fde0a4c079f02f35328ab4ce66355730b7bee038c0b2ea7fabdaf7793d18c6c36a2e393206559e92aac97c2bc0b00ec23269c0e0c5dc9"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1009}}, {0x13, &(0x7f0000000e80)=@string={0x13, 0x3, "e4179ec953e1307786ebc27e3509ea628c"}}, {0x44, &(0x7f0000000ec0)=@string={0x44, 0x3, "a1f7d80074d8a56c6be7e060b462be40525958aac0e626425aa0e00ac02a26e6f4b22f094494163d525cfdc13a988dbe2d95e29ca0c2c2b2d442c838af98c33c4f11"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000010c0)={0x14, &(0x7f0000001000)={0x20, 0x6, 0x4a, {0x4a, 0x1, "a79bbdb326b409a0a398640464de9038e4eabac8f6b22282ac2ab672218ef6105482c3c113ed49c463db9d920b2ba7b13fd8ec5069e72345243225f3f067e2271e6adcb964caaf34"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001380)={0x44, &(0x7f0000001100)={0x40, 0xb, 0xa9, "864ac3663a08d0d00b0326d94506ae6c51d30bcbc7bcb8b9fb97193d7bac05cfb012f2546f859787ff382cb8ed86de60d396d481a67d42f62d5ecf7abc59ae3f01f1b47307b43762553d8af854a2847ad9c99a70abd819d3c6e7d83231cddcae947db3977ad4326a928ae2a7ff14888cf8ee553c853f495483b49ab36aac34f23013f8f3cbc96f81672ae116138e284cfb901f649d1f078725cdae847b366f5dbfbfc4ade6e2ce1573"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001240)={0x20, 0x80, 0x1c, {0x1, 0x7, 0x10001, 0x9, 0x0, 0xda, 0x1, 0x3f, 0x2, 0xe, 0x5, 0x8000}}, &(0x7f0000001280)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000012c0)={0x20, 0x83, 0x2}, &(0x7f0000001300)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000001340)={0x20, 0x89, 0x2, 0x1}})
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000001400)=[0x84c6, 0x5])
syz_usb_connect$uac3(0x6, 0xf7, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x9, 0xd0, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x23, 0x7}, [@extension_unit={0x19, 0x24, 0xa, 0x4, 0x5, [0x1, 0x1, 0x0, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x3, 0x7, 0x1c, 0x4, 0x2, 0x2}, @as_header={0x17, 0x24, 0x1, 0x7f, 0x10, 0x800, 0x1001, 0x2, 0x8, 0x6000, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x6, 0x9, {0xa, 0x25, 0x25, 0x4, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x1, "ac", "b00737"}, @as_header={0x17, 0x24, 0x1, 0x5, 0x0, 0x1ff, 0x4, 0xb, 0x9, 0x8, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x1, 0x3a, "154d11b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7d, 0x0, 0x0, {0xa, 0x25, 0x25, 0x9, 0x8, 0xff}}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x1, 0x40, 0x1, 0x10, 0x4}, 0x18, &(0x7f0000001580)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8c, 0x4e, 0x2}]}, 0x5, [{0x3c, &(0x7f00000015c0)=@string={0x3c, 0x3, "42f4453a53a6d1fcc3a0ba1e6b57b9843e437fd9ab69c4652b973b072954dc24e324050d6a74f89188f1858a48e3edd8746492012dff60f2e7e1"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "0a26bd030434b1e9c1f745d08e21f37f0014527eba63fa757e4ab600f0feeae50724c877602c052a3a9a4340e83a7c5f8e97b224668e86fb46d4b677712735cb634f5b57f1469de707df6eeed87fc57a9c6303688c6e40541815ac000a4fc3d31a1449458f4f9c61399ba716607dfc0a55e734214c435eb92aee08c9f00e50476bd70e1929f525e8366b70164db0c14657c467bdffb171d753b5937fcc638e176d9942ec7de32114a7701dd9a31a509b7383"}}, {0xe, &(0x7f00000016c0)=@string={0xe, 0x3, "ee60531837ccc9d77059639d"}}, {0x5b, &(0x7f0000001700)=@string={0x5b, 0x3, "f8a88f604aca18899cf46d10606dbc8ab9a98b48565cb5f9725f4838771b8e5f3f6455d5ab82fc9e0b2e3d7b26091b260e92bd9c272fd60ad9fe39e6aba35efa4330dcaa0ea73fabe61420614d5ef578bf5d58e0884d99525a"}}, {0x2f, &(0x7f0000001780)=@string={0x2f, 0x3, "859fcef9b7e973e56ef99e044551cdcd11099d8218e73e13fa37c86a264735d50e5c3a09c29124daba45a0c0e1"}}]}) (async)
r5 = syz_usb_connect$uac3(0x6, 0xf7, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x9, 0xd0, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x23, 0x7}, [@extension_unit={0x19, 0x24, 0xa, 0x4, 0x5, [0x1, 0x1, 0x0, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x3, 0x7, 0x1c, 0x4, 0x2, 0x2}, @as_header={0x17, 0x24, 0x1, 0x7f, 0x10, 0x800, 0x1001, 0x2, 0x8, 0x6000, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x6, 0x9, {0xa, 0x25, 0x25, 0x4, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x1, "ac", "b00737"}, @as_header={0x17, 0x24, 0x1, 0x5, 0x0, 0x1ff, 0x4, 0xb, 0x9, 0x8, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x1, 0x3a, "154d11b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7d, 0x0, 0x0, {0xa, 0x25, 0x25, 0x9, 0x8, 0xff}}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x1, 0x40, 0x1, 0x10, 0x4}, 0x18, &(0x7f0000001580)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8c, 0x4e, 0x2}]}, 0x5, [{0x3c, &(0x7f00000015c0)=@string={0x3c, 0x3, "42f4453a53a6d1fcc3a0ba1e6b57b9843e437fd9ab69c4652b973b072954dc24e324050d6a74f89188f1858a48e3edd8746492012dff60f2e7e1"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "0a26bd030434b1e9c1f745d08e21f37f0014527eba63fa757e4ab600f0feeae50724c877602c052a3a9a4340e83a7c5f8e97b224668e86fb46d4b677712735cb634f5b57f1469de707df6eeed87fc57a9c6303688c6e40541815ac000a4fc3d31a1449458f4f9c61399ba716607dfc0a55e734214c435eb92aee08c9f00e50476bd70e1929f525e8366b70164db0c14657c467bdffb171d753b5937fcc638e176d9942ec7de32114a7701dd9a31a509b7383"}}, {0xe, &(0x7f00000016c0)=@string={0xe, 0x3, "ee60531837ccc9d77059639d"}}, {0x5b, &(0x7f0000001700)=@string={0x5b, 0x3, "f8a88f604aca18899cf46d10606dbc8ab9a98b48565cb5f9725f4838771b8e5f3f6455d5ab82fc9e0b2e3d7b26091b260e92bd9c272fd60ad9fe39e6aba35efa4330dcaa0ea73fabe61420614d5ef578bf5d58e0884d99525a"}}, {0x2f, &(0x7f0000001780)=@string={0x2f, 0x3, "859fcef9b7e973e56ef99e044551cdcd11099d8218e73e13fa37c86a264735d50e5c3a09c29124daba45a0c0e1"}}]})
syz_usb_control_io$uac3(r5, &(0x7f0000001980)={0x14, &(0x7f0000001840)={0x20, 0x9, 0xae, {0xae, 0x4, "c4999c3f1a72004a0e17b011864fa881fbe14bebcf82505d4244f5020c089f1a6797d699cf739106578b4260a8786300756313fb0d0ab0fbfce7ad854c5169c6b7e3e71004e0ecd1dae5941a7542136f334cabbfc82120050751d0c718093fec4e61a75cf66f7fbcd727a1fa7c59267448428b920ad2da3a2e4e831ad34076d47f64edc0567749c54365907ea374882be67ef1cd0b6e8bc24e1cbc77149d5c7315b74f76e42fc18e678b8640"}}, &(0x7f0000001900)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "3e97054a6802cf684eb43b3f805f62559299481e915a1c80426c04aa13ca5ad5c15f4b38bd1c140b207523f3e16a34f2d31e73127ba96f2f988480ab57febc99671089396ab579062b9e1ae9ca"}}}, &(0x7f0000001bc0)={0x44, &(0x7f00000019c0)={0x40, 0xb, 0x35, "f8d0637ffc96b599bcb74bff169bf68d7471f95c0d51150a1c939e2b7f72629ba0523ece255c951648487dc8b2782b0bc7bf5766aa"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001a80)={0x20, 0x81, 0x2, "f598"}, &(0x7f0000001ac0)={0x20, 0x82, 0x3, "ed8f56"}, &(0x7f0000001b00)={0x20, 0x83, 0x1, 'G'}, &(0x7f0000001b40)={0x20, 0x84, 0x4, "1c67cecd"}, &(0x7f0000001b80)={0x20, 0x85, 0x3, "0e9aa5"}})
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001cc0)={0x17, 0x7b, &(0x7f0000001c40)="403e4b517bff45612b05dd917e155f97a92ddd440fc91f95110dcb18636212e1b2dfa99bf2370c1388203f14d8a63dd73848f95b3062f79a6efc19b3764f90add9c94c9981d8512fad90bfd0111d52f2a9d9b078363cdf64f24c417664219faf8d93c89708bf8152305c903e0ef92d06d017d09f06a35d7ee53daa"})
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000001d00)=""/47) (async)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000001d00)=""/47)
syz_open_dev$evdev(&(0x7f0000001d40), 0x3, 0x290000)
syz_usb_control_io(r3, &(0x7f0000002100)={0x2c, &(0x7f0000001d80)={0x20, 0x21, 0xd0, {0xd0, 0x31, "f3ea99aad075609a092e1f263a2202c368735abb1c6579db879c56abbbf77adc70e6577ccd7906ca836c9a666804b082f6bba89511523e00ad6cc9715f000c126adad57188580be4347579a727b513c827de6aa5e8a698a16d45bb2b3b3b33fe004b96caf2bcc0798f1a40847a08c3d92a3e61a9804017c3232a3402b8e7fa6cb94f1553756fa1bc349cad56f41f21fc2ade50c0e2445b3f0959628814f79a1d9cab92a6811023bdd273ca3c6e1d1609b5e053ed1d32c067312d0d3b4fe1e5547fd31eafa471488d84de5dc75e7f"}}, &(0x7f0000001e80)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "a2d3dbe8f7fdacbdbbe57d12d58116058e6c81e84451383fed7e1468c71599ebf591e5fcb54f87b36ab318c29b6991fc4b7c4d14a1760c0b136c79c913569f4297666add70234298d4a0414ea0dd513d62072f0767109250f3b83294f8c38b664f4d31f902613805561db403c61dec491c070aae4c52c377e604fd2b8c85cc7676c4c7273041c98bc1efa47dc54053ea31653f0d4252505aa44a24109b71ff344a37200012a1f538361d4cedf83117cdb7063602b40b432cf2cad44ec8398bbe06c7830947c24abd0bde7ae757ee6cc681f670b693f08499a0d4"}}, &(0x7f0000001f80)={0x0, 0xf, 0xf1, {0x5, 0xf, 0xf1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xff0f, 0x800, [0xc0, 0x3f00]}, @generic={0xd5, 0x10, 0x4, "3887ab8686087ffeea26b1c4964d3c93059744e2189ef74ba4a6798c373707491e54fe1546334a20811cbcc259dcbb5b0dcf7cdc23e30b7f6c71d4858042c6633fc5dd58ad98c08725250c5b69b8b3382215a3f4e419134383cfefc2768aa33547f8afd712f743faa1e1fe34a45d890da9ddbbc0c01792d31f771e7647eb2462305f60efc6e4f167e6399a0f0697de1b95dfa9fc169cc4018181c97c02c43deb847e3b5ba13acdcfe3b4d9adde0a4536b020d5b48bf2d7e6b9a30efd475fd2683dbc3cf1e4c0f1420f355812ae288f1123d9"}]}}, &(0x7f0000002080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x2, 0xfb, "1e8af471", "b94daf15"}}, &(0x7f00000020c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x6, 0xe, 0x4, 0x739c, 0xc422}}}, &(0x7f0000002580)={0x84, &(0x7f0000002140)={0x40, 0x0, 0xb9, "443ba24031c61a2e77595b2bbe60eb82993e2baa96083c2b9bc8eaa0f88a5a549073f881da581dbae5535c865884cfab198a2bbade6332de4ab1f2712b84b5e9ce2c3ae0a629beb9b6ddb1c8958673f8358f073292453876fd16369f462b272f9cb44831bdc40de818ca33bd404dbd839279563d93ecd0fdf5b5e9b992887397bcb9891d646b861984c10e8702a90648fee1893db78363208977ee35d164743350f9faeca2d6741943ffea54562e148c930be4edd6bd6fec42"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000022c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x4}, 0xfffffffffffffffd, &(0x7f0000002340)={0x40, 0xb, 0x2, "1e50"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0xe}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "fe4d"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x4d}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000002540)={0x40, 0x21, 0x1}}) (async)
syz_usb_control_io(r3, &(0x7f0000002100)={0x2c, &(0x7f0000001d80)={0x20, 0x21, 0xd0, {0xd0, 0x31, "f3ea99aad075609a092e1f263a2202c368735abb1c6579db879c56abbbf77adc70e6577ccd7906ca836c9a666804b082f6bba89511523e00ad6cc9715f000c126adad57188580be4347579a727b513c827de6aa5e8a698a16d45bb2b3b3b33fe004b96caf2bcc0798f1a40847a08c3d92a3e61a9804017c3232a3402b8e7fa6cb94f1553756fa1bc349cad56f41f21fc2ade50c0e2445b3f0959628814f79a1d9cab92a6811023bdd273ca3c6e1d1609b5e053ed1d32c067312d0d3b4fe1e5547fd31eafa471488d84de5dc75e7f"}}, &(0x7f0000001e80)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "a2d3dbe8f7fdacbdbbe57d12d58116058e6c81e84451383fed7e1468c71599ebf591e5fcb54f87b36ab318c29b6991fc4b7c4d14a1760c0b136c79c913569f4297666add70234298d4a0414ea0dd513d62072f0767109250f3b83294f8c38b664f4d31f902613805561db403c61dec491c070aae4c52c377e604fd2b8c85cc7676c4c7273041c98bc1efa47dc54053ea31653f0d4252505aa44a24109b71ff344a37200012a1f538361d4cedf83117cdb7063602b40b432cf2cad44ec8398bbe06c7830947c24abd0bde7ae757ee6cc681f670b693f08499a0d4"}}, &(0x7f0000001f80)={0x0, 0xf, 0xf1, {0x5, 0xf, 0xf1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xff0f, 0x800, [0xc0, 0x3f00]}, @generic={0xd5, 0x10, 0x4, "3887ab8686087ffeea26b1c4964d3c93059744e2189ef74ba4a6798c373707491e54fe1546334a20811cbcc259dcbb5b0dcf7cdc23e30b7f6c71d4858042c6633fc5dd58ad98c08725250c5b69b8b3382215a3f4e419134383cfefc2768aa33547f8afd712f743faa1e1fe34a45d890da9ddbbc0c01792d31f771e7647eb2462305f60efc6e4f167e6399a0f0697de1b95dfa9fc169cc4018181c97c02c43deb847e3b5ba13acdcfe3b4d9adde0a4536b020d5b48bf2d7e6b9a30efd475fd2683dbc3cf1e4c0f1420f355812ae288f1123d9"}]}}, &(0x7f0000002080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x2, 0xfb, "1e8af471", "b94daf15"}}, &(0x7f00000020c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x6, 0xe, 0x4, 0x739c, 0xc422}}}, &(0x7f0000002580)={0x84, &(0x7f0000002140)={0x40, 0x0, 0xb9, "443ba24031c61a2e77595b2bbe60eb82993e2baa96083c2b9bc8eaa0f88a5a549073f881da581dbae5535c865884cfab198a2bbade6332de4ab1f2712b84b5e9ce2c3ae0a629beb9b6ddb1c8958673f8358f073292453876fd16369f462b272f9cb44831bdc40de818ca33bd404dbd839279563d93ecd0fdf5b5e9b992887397bcb9891d646b861984c10e8702a90648fee1893db78363208977ee35d164743350f9faeca2d6741943ffea54562e148c930be4edd6bd6fec42"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000022c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x4}, 0xfffffffffffffffd, &(0x7f0000002340)={0x40, 0xb, 0x2, "1e50"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0xe}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "fe4d"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x4d}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000002540)={0x40, 0x21, 0x1}})
r6 = syz_open_dev$hiddev(&(0x7f0000002640), 0x0, 0x400)
ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000002680))
ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x5)
syz_usb_control_io$uac3(r5, &(0x7f0000002740)={0x14, &(0x7f00000026c0)={0x40, 0x1, 0x9, {0x9, 0x24, "6d690538fc9496"}}, &(0x7f0000002700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f00000029c0)={0x44, &(0x7f0000002780)={0x0, 0x1, 0x6a, "3ddb89fd6070e670b7610af60ee2d2f124f01e7226215609cab10d7049ecbefb6e249ff11b073cd6d8d46a702dcdd9b3d18b961ccb4c41de54a5dab20594b752dc4a9f1571dc7fbdf59575bb2d4381c8bc6ffc5911172780d7836290ff670f656522f76036a31ee555fd"}, &(0x7f0000002800)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000002840)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002880)={0x20, 0x81, 0x2, "c224"}, &(0x7f00000028c0)={0x20, 0x82, 0x3, "761a83"}, &(0x7f0000002900)={0x20, 0x83, 0x1, "a0"}, &(0x7f0000002940)={0x20, 0x84, 0x1, "e8"}, &(0x7f0000002980)={0x20, 0x85, 0x3, "4934e5"}})
ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000002a40)=0x1) (async)
ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000002a40)=0x1)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0xc, @string={0xc, 0x3, "acf322afd3a694bf4b82"}}, 0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000338d19e40c6050592d77e01020301090224000172061006090400e802ff34bc03090501024000ff0d030905ca"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="e2")
executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x43, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "60924fdb"}]}}, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904b1d02cff023000090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800)
write$hidraw(r0, &(0x7f0000000040)="caaf5d1130d55c3f91cc7b6093", 0xd)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/135)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000140))
r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x0)
read$hidraw(r1, &(0x7f00000001c0)=""/201, 0xc9)
r2 = syz_usb_connect$midi(0x6, 0x61, &(0x7f00000002c0)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1, 0x60, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0xce, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x3, 0x7, [{0x19, 0xc8}, {0x7, 0x7}, {0x3b, 0x9}, {0x8, 0x5e}, {0x56, 0x7}, {0x0, 0x7}, {0x2}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x4, 0x3, {0x11, 0x25, 0x1, 0xd, "b7c6959942c06a29856314d4c3"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x8, 0x4, 0x3, 0x10, 0x5}, 0x8, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0xac, &(0x7f00000003c0)=@string={0xac, 0x3, "6eec593e498df795b15e4473f47f49f8d5ddc096cafff17c9b752de1bcb6827c3ad93bfd4c0da682d179753f6685ae90062179b793e582dcaddb557dc8c529613ffad17cd0d7429cb5da2777d4c7f26c2154f3ffa105bca28da90ae9442b1bd3b75cd5458416842e3405a1e944a5dd14ad48e0303c2bfcb41cbeddf98991b43887d8e717157d672b9b94ab4116c2a9d41c96ea1ca7209d8c316540992190e7d63dd67a0e75770d84a102"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0xa9, &(0x7f0000000580)=@string={0xa9, 0x3, "c81fe0d5fc03fd3f42bbd0ffecb839319943158c55ed0a353a5d9e0894497d7b139ebabba08dfdff2a472f20dd58dcfe2ace1f6bfe9e7016fd81e43d5e0717b09cf8d1900e02481aa7db65f2d6324adc548089daace8114b9de021d12f1e12043b0ccfd618f754f282b4bf7f9fd8bbab3048c7fb6bb7b2a6d6b5d132010f23a806a87c4ebfab64b641b86a9515a70b54a75a18f6bf2a90eb70d3799cee46fecab294fd6aae7785"}}, {0xd0, &(0x7f0000000640)=@string={0xd0, 0x3, "3901c60dccf94cb3aa83b42319cee55bc5dfdeb33f5fd6c7eaa4029363f49ebaf29940820925dc2596ec414b2f9850f01a0651d9dcc419952de8621839fbe46659e816e4561019969112eb7638d1216200c80c0583a6fbf624de8d76f39939e0d4e3aa2d81bd7ec35d1b7599894bff542525d6137afdb4d6a4d687a9af50c019a6c579422d23d1a92da761919fdcd2dc46add12e9fe84da1e73362e6c974ecfd1b47c28cf0e03075235770b6d6b8ec85c52ddeeaef53f99bb77678a6a826c298e766c861d36f649233ebedbac56f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x813}}, {0x76, &(0x7f0000000780)=@string={0x76, 0x3, "0247fca9de82ab7a2c618bc751167f4bbe6e06618d01babf4ee12283946593f0e80f8b7188d55f6452c295c423be617c94efe74aecb232cc5eb6b53b9f48c9455a592c542e9859346b0a55e5002cf7f2bb4ac651dde8e0bc63e354d93b5385f5b46732a11c73a66d18e38628a5ccdc661f52d075"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3c8, &(0x7f0000000900)={[{}, {0x95, 0x4e00, "301ac046f1172115c63f147555e5b3e227f3d9fb4c53ec23cb950c6a821499d3fc2b88b60a45cb61c1fef9416dfd96a5d4743108ede9497251007c0350bc3c9948b7b14963dcf99fcbdec3392145b02b283b5082f52fece805a61e4bcc540fc005722755b0f99289eb717e660f84326985f0a580aee105c4cb2c31e34374722a2032c1e8ede50d9eeac1af468d68c2ff7300e66dc0"}, {0x4, 0x4e00, "8fb78a69"}, {0x78, 0x4e00, "ee0e51dccd714f7b34dd1fb224136d60e9e51dcb95f89dbd26b5803581e0a8c95ecb3053ade63b3d6f67f14cfd8e70e7d0919041c611dffb044e2a666d19788e06d573407bf52b081fa14b52788b602ee2ae9eec7491c38d8d461f0a062984f25761d9d1cec956c61dcb567911483b6c6c064f3fb3cfe360"}, {0xfd, 0x4e00, "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"}, {0xf8, 0x4e00, "ea290c2e4ce88336b261a96c07fd7cb9f36987308c1ef5ada778c5931dd3553ffe548a6a3e11e2f99da5269c8b89478c11ad9f03f0f59efa98367ea332e36e6528dd32f9d98a1af6f506edeaa19440a34ac49bb50a41ae70aa689a2801151a62b33461c952d360665cd0fea7d7f205ab5ebae5a853b58f77b20c7c406566387971f31fe894f5304d008ed30911f72f816983c9a9d1b42296a0dd9f372959fc231dcca8c94b194aa21823f69b89ee20b8bd0cd4634511828e1c68727ac2bc804aa8b47b99808db6ed62e390252788860e4b240df8fc193427c64b94bfac30ca66363605f595ad599e5e2e61539658b70ae1911340e15c09ab"}, {0x9e, 0x4e00, "2ca615a2414e6c271ac24894ac0e8527a2aff4552671ea36279b9e34b815c7f327bb4c0301cae45ad7a0a91a25cb21e8f3bbbe25f2f68b50cd16ca6cf490988a19b85f18168eab1bb4c987e34c00d4690448f9f90039bba1ee7b3445f6214535babdcd01533e20256ab97ebff66beb7734909560560b09c9993858c67b5124c6ba6b7bbc959b67da82347a71e7a7a485c9538aa74e06293d2c3649ee5606"}]})
r3 = syz_open_dev$hidraw(&(0x7f0000000d00), 0x6, 0x80000)
r4 = syz_open_dev$hidraw(&(0x7f0000000d40), 0xc259, 0x0)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000d80)=""/235)
r5 = syz_usb_connect$midi(0x5, 0xb6, &(0x7f0000000e80)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x1, 0x1, 0x3, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x8, 0x1, [{0x4, 0xd}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xa0}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x7f, 0x2}, {0x1d, 0x7}, {0x80, 0xff}, {0x8, 0x81}], 0x9}], [{{0x9, 0x5, 0x35fb1c2d00e679e5, 0xc, 0x200, 0x3, 0x7, 0xd, {0xf, 0x25, 0x1, 0xb, "e31c518806825f11aa806c"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x7, 0x7, 0x2, {0xc, 0x25, 0x1, 0x8, "6e44f2bbb12f54fc"}}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x7, 0xd, 0xd, {0xa, 0x25, 0x1, 0x6, "c157c529f4f6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x75, 0x8, {0x12, 0x25, 0x1, 0xe, "218a636f6f1ccd429ca9aaedc5bc"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0xa, 0x1, 0xc2, 0x20, 0xb}, 0x19, &(0x7f0000000f80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6b22f53732c818d1d86b4bb6862a81c7"}]}, 0x8, [{0x4f, &(0x7f0000000fc0)=@string={0x4f, 0x3, "579c5b323ee1ec8cea9f0069ae46d5230a653589fcce49c7a2c7a8df5ad866fd7b2356b98fe2b92c43569267f6d1a007966a42bf46c76d43ff207552f55049d30dc6d9764c1bd25cb720ab94e2"}}, {0x4, &(0x7f0000001040)=@string={0x4, 0x3, "5d14"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1c09}}, {0x22, &(0x7f00000010c0)=@string={0x22, 0x3, "cb5579b514b7025e1fdd467d63581a8af794b3e80f4324397bd5e8b9bbea0021"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x438}}, {0xf7, &(0x7f00000011c0)=@string={0xf7, 0x3, "087dc1eb9b4f0bc1dcfa590860d282b6cd6390d30f38e3352d68c1448f3272283fe345f4a655c8e13346a5aed49e0b7585300f0e3ecb726aad76e2ce40559c6e3c580fee8c543939759e91b6a7aab65f28c6e469f6e08f7205f49fa610d6bb611478827d7de6308d970fdf0a006a25e7229590e80d3c23c75f08192389862c47a458fef2520bb24e8a709bab51cd98e72a839e990dd3378e62bfed2aeed41d200d468200c9e2a84f390a667e8e9fefde17eaf2a04880aaabba510d36005d6887c0c48686fb6c6d19fa2990399113fabcd58a48011cd835161041b635fbca2d6ac28899cb7331a47b174577c344dbf900e0fd9840fe"}}]})
syz_usb_disconnect(r5)
r6 = syz_open_dev$hiddev(&(0x7f0000001340), 0x9, 0x181081)
ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000001380)={0x3, 0x1, 0x780000})
r7 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3, 0x2c00)
ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000001400)=""/8)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000001440)={{0x3, 0x200, 0x4, 0x6, 0x2, 0x8}, 0x3b0, [0xffff, 0x1000, 0xfff, 0xa, 0xa30, 0x7, 0x401, 0x5, 0x7ff, 0x4, 0xc71d, 0x3, 0x915, 0x1, 0x2, 0x9, 0xa, 0x1, 0x7, 0x8, 0x9, 0xfffffffd, 0x4, 0xfffffffd, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0x5, 0x91, 0x3, 0x6, 0x0, 0xffffffc0, 0x2, 0x311, 0x1, 0x9, 0x400, 0x8, 0x9, 0x3, 0xd66, 0x771, 0x1, 0x2, 0xebd, 0x7af, 0x4, 0x6, 0x9, 0x1967, 0x80, 0x1000, 0x9, 0xfcbb, 0x5, 0xe, 0x6, 0x0, 0x6, 0x2, 0x4, 0xa, 0x1, 0x4, 0x101, 0x7, 0x60, 0x7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x3, 0x29, 0xfffffff8, 0x6, 0x2, 0x8, 0x20, 0x8, 0x1, 0x8, 0x7, 0x5, 0x0, 0x1ff, 0x6, 0x9, 0x0, 0x10001, 0x5, 0x802000, 0x4, 0xffffffff, 0x800, 0x4, 0x5, 0x7, 0x3, 0x1ff, 0x5, 0x5, 0x7, 0x5, 0x10000, 0xff, 0x2fd, 0x5, 0x0, 0x80000001, 0x8, 0x98, 0xc, 0x8, 0x21, 0x6, 0x3, 0x2, 0x3, 0x6, 0x87, 0x4, 0x0, 0xffff, 0x6, 0x7, 0x81, 0x9, 0x7f, 0x7, 0xffffffff, 0x44, 0x7fffffff, 0x1, 0x2, 0x8, 0x6, 0x1, 0x28b9, 0x9, 0x2, 0x0, 0x4e17, 0x200, 0x4, 0x6, 0xffff7ee9, 0xc1ec, 0x3ff, 0x38, 0xf246, 0x3, 0x2, 0x1, 0x0, 0x2, 0x56a9, 0x1, 0x1000, 0x0, 0x2, 0x7, 0xff, 0x7, 0x8, 0x3, 0x80, 0x6, 0x0, 0x400, 0x800, 0x80000001, 0x6, 0x7fff, 0x1, 0x22, 0x8, 0x7, 0x6, 0x6, 0x2, 0x6, 0x1, 0x32a7fed9, 0x8001, 0x3c29, 0x3, 0x99, 0x1, 0xfffffffa, 0x6, 0x2, 0x7, 0x10, 0x200, 0x4, 0xb, 0x0, 0x80, 0x4, 0x2, 0x6bfb, 0x1, 0x9, 0x400, 0x8, 0x3, 0x924, 0x72, 0x0, 0x9, 0x63, 0x7, 0x800, 0xd4e, 0x0, 0x5, 0xcdba, 0xecd9f1, 0x9, 0xa7c, 0x62, 0x77e6, 0x8, 0x80000000, 0x4e, 0x7f, 0x26, 0xdb6, 0x1, 0x61db, 0xb9, 0x101, 0x7, 0x3, 0x401, 0x10, 0x3ff, 0xc60, 0x3, 0x6, 0xe, 0x2, 0x4, 0x2000200, 0x2, 0xf, 0x7ff, 0x3, 0x0, 0x0, 0x80000001, 0x7f, 0xd0, 0x7fffffff, 0x6, 0x6, 0x9, 0x93a00000, 0x7fff, 0x3, 0x81, 0x32e, 0x2, 0x0, 0x99, 0x7, 0x8, 0xfffffffb, 0x5, 0x9, 0x401, 0x2, 0x40, 0x1000, 0x7, 0x3, 0x5, 0x8ecb, 0xffffffff, 0x5, 0xffffffbe, 0x7, 0xfff, 0x4, 0x4, 0x401, 0x10001, 0x6, 0xa78, 0x0, 0x2, 0x6, 0xfffffffd, 0x1, 0x3, 0x2, 0x0, 0x7, 0x10001, 0xc4, 0xffffe043, 0x2, 0x2, 0xfffff000, 0x3ff, 0x4bc, 0x9, 0x63c, 0x100, 0x741, 0x3, 0x1, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x0, 0x4, 0x2, 0x9, 0x5, 0x7ff, 0x8, 0x65, 0xff, 0x800, 0x5, 0x10000, 0x10, 0x2, 0x45, 0x2, 0x4, 0x4, 0x9, 0x0, 0x6, 0x5, 0x4, 0x3, 0x5, 0xa40, 0xffffffff, 0x7, 0x3, 0xff, 0x6, 0x100, 0x7f, 0x7, 0x9, 0x1d2, 0x40, 0x101, 0x4, 0x10, 0x3, 0x1, 0x0, 0x7ff, 0x8, 0x7, 0x7ff, 0x9, 0x7475, 0x7fff, 0x6, 0x7, 0x4, 0x0, 0x6, 0x1, 0x9, 0x1000, 0x2, 0x2, 0xb, 0x1, 0x4300, 0xd3c0, 0xfffffffb, 0x3, 0xa448, 0x7, 0xbaf2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x100, 0x2, 0x7, 0x5, 0x100, 0x0, 0x100, 0x4, 0x3, 0x192500, 0x0, 0x3, 0x9, 0x4, 0x6, 0xffff8001, 0x2, 0x9, 0x4, 0x6, 0xe, 0x10000, 0x0, 0x1, 0xc5, 0x6, 0x6, 0x1000, 0x9, 0x4, 0x0, 0x0, 0x2, 0x5, 0xffffffff, 0x7, 0x973b, 0x70, 0x1, 0xa3, 0x3, 0xff, 0x6, 0x0, 0x100, 0x7ff, 0x6, 0x3, 0x1, 0x1a0, 0x9, 0x0, 0x65, 0x10000, 0xdd59, 0xa81, 0x6, 0x5, 0x7f, 0x6, 0x6, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0xffffffff, 0x10, 0x9aa, 0xb20, 0x1, 0xab, 0x10001, 0x4, 0x8, 0x99f8, 0xb, 0x7, 0xf, 0x4, 0xc, 0x4, 0x1, 0x8, 0x1, 0x10, 0x8, 0x7, 0x3ff, 0x0, 0x9, 0x9b, 0x1, 0xffff7fff, 0x5, 0x6, 0x5, 0x9, 0x6, 0x7, 0x600, 0xffff6a0b, 0xc, 0xffff, 0x3, 0x4, 0xffffffff, 0x81, 0x6, 0x7, 0x1, 0x40c, 0x3, 0x0, 0x6, 0x1ff, 0xa, 0xf5795e5a, 0x3, 0x8, 0x4, 0x3, 0xa943, 0x9, 0x80000001, 0x6, 0x1, 0x7, 0x0, 0x7, 0x1, 0xe, 0x6, 0x1, 0x3, 0x7f, 0x3, 0x101, 0x4, 0x1, 0x10001, 0x7, 0xffffffff, 0x5, 0x2, 0xfff, 0x1, 0x6, 0x80000000, 0xe6f, 0x1, 0x0, 0x8, 0x6, 0x8, 0x2, 0xffff, 0xa1, 0x0, 0x5, 0x9f5, 0x8, 0x3, 0x40, 0x4, 0x8, 0xe6f5, 0x0, 0x2, 0x0, 0x1ff, 0x5, 0x1, 0x7, 0x10000, 0x6baf, 0x3, 0x8000, 0x1, 0xfffffffb, 0x2, 0xeed3, 0x8, 0x3, 0x5, 0x600, 0x7ec8, 0x2, 0x6, 0x9, 0xb, 0x5, 0x2, 0x401, 0x80000000, 0x4744, 0x10001, 0x0, 0x4, 0x2, 0xed2, 0x3, 0x3, 0x8533, 0xa0b, 0x7fffffff, 0x3, 0x2, 0x1, 0xe8, 0x100, 0x9, 0x4, 0x10, 0xfffffff7, 0x8, 0x3, 0x0, 0x510, 0x0, 0x3, 0xb, 0x2, 0x8, 0x7, 0x101, 0x3ff, 0x5, 0x1, 0x8001, 0x0, 0xffffffff, 0x8, 0xfff, 0x400, 0x80, 0x53f5, 0x7ba, 0x1000, 0x6, 0x100, 0x26, 0x5, 0x1, 0x2, 0xffff, 0x1, 0x6, 0x2, 0x6, 0x9e0, 0x2, 0x3, 0x3, 0x1ac12aea, 0x9, 0x2, 0x5, 0xfffff000, 0x8, 0x84e7, 0x54b8, 0x8, 0x400, 0x7, 0x8, 0x1, 0x0, 0xf, 0x5, 0x1, 0x48, 0x200, 0xd, 0x3d2a, 0x0, 0x7, 0x1, 0x4, 0x7fff, 0x800, 0x6, 0x0, 0x7b, 0xca, 0x1, 0x1, 0xf, 0xa, 0xffff31dc, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x6, 0xb7, 0x66, 0x7, 0x9, 0x0, 0x5, 0x4ac50617, 0x6, 0x2, 0x2, 0x6, 0xb3c, 0x0, 0xfffffffa, 0x8f, 0x800, 0x8bc, 0xffffffc0, 0x69, 0xffff, 0x5, 0x52a5, 0x6, 0x7, 0xc5, 0x4, 0x10, 0x1ff, 0x8000, 0x8, 0x9, 0xffffff41, 0x6, 0x6, 0x1, 0x67, 0x7, 0xfffff691, 0x3, 0x8, 0xfffffffa, 0xc7, 0x10001, 0x80000000, 0x3, 0xffff, 0x51f0, 0xa, 0x8001, 0x7, 0xe82f, 0xf, 0x101, 0x2, 0x101, 0x9, 0x80, 0x22, 0x4, 0xffff, 0x9, 0x3, 0x3ff, 0x6, 0xd6, 0x6, 0x5, 0x21, 0x2, 0x8, 0xe, 0x800, 0xcd, 0x5, 0x6, 0x80000000, 0x5, 0x73fc, 0x4, 0xea9c05a, 0x6, 0x7, 0x57, 0x7, 0x3, 0x2d, 0x6, 0x2, 0x6, 0x4, 0x6, 0x8, 0xffff, 0xad, 0x2, 0x8, 0x0, 0x80, 0x3, 0x8, 0x2, 0x878b, 0x100, 0x7, 0x1ff, 0x79, 0x200, 0x3, 0x4, 0x9, 0xffffffa3, 0x101, 0x6, 0x2, 0xf8, 0x100, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x5, 0x0, 0x6, 0x7, 0x100, 0x0, 0x8, 0x9, 0x1, 0x4, 0x8, 0x101, 0x1, 0x4, 0x81, 0x4, 0x5, 0x2bc5, 0xb, 0x9, 0x0, 0x40, 0xbc, 0x8, 0x1ff, 0x3, 0xf30, 0x3, 0x5, 0xfffff965, 0x44dd, 0x7fffffff, 0x8000, 0x9, 0xf1, 0x80000000, 0x4, 0xffffffff, 0x0, 0x1, 0x7, 0xf4, 0x7, 0x1, 0xfb, 0x4, 0x48, 0x7fffffff, 0x7ff, 0x2731, 0x3, 0x6, 0xc00, 0x1000, 0x3, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x3, 0x5, 0x5, 0x1, 0xc00, 0x6, 0x1, 0x9, 0x200, 0x4e5c, 0x80000000, 0x3cc8b1f4, 0x1, 0x0, 0x401, 0xffffff0b, 0x42c3, 0x3, 0x9, 0xd, 0x9, 0x4, 0x1, 0xffff, 0x1, 0x4e39, 0x8, 0x80000000, 0x8001, 0x6, 0x9, 0x7fff, 0x8, 0xfff, 0x9, 0x4, 0x100, 0x2, 0x2, 0x7, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x61d, 0x3, 0x5, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x4, 0x8000, 0x7f, 0x3, 0x3a75, 0x7, 0x1, 0x100, 0xfff, 0x800, 0x0, 0xe, 0x47d9, 0x9, 0x3, 0x5, 0x4d04, 0x6, 0x120, 0x2, 0x6, 0xfffffffa, 0x9, 0x2, 0xf133, 0x0, 0x8, 0x3, 0xffffffff, 0x2, 0x0, 0x781e, 0x0, 0x4, 0x1, 0x9, 0x9, 0x99, 0x9afc, 0xfffffff3, 0x976d, 0x8, 0x200, 0x100, 0x2, 0x5, 0xfffffbff, 0x7ff, 0xf, 0xc7, 0x1, 0x6, 0x80000001, 0x2, 0x7, 0x8, 0x7, 0x3e268a1f, 0x4, 0x929a, 0x2, 0x2, 0x10000, 0xe, 0x4, 0x3, 0x7, 0x9, 0x3, 0x2255, 0x62, 0x8, 0x45e, 0x9, 0x9, 0x2, 0x2dc, 0x0, 0x10001, 0xec8, 0x9, 0x9, 0x2, 0xf79e, 0x5, 0x2, 0x4, 0x10001, 0x1, 0x5, 0xded, 0x31]})
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000002480)={0x6, "33878ece3ed0722983b73970f7e3bd819354d537842749a66d129fcf538215e048ba20f39de3441d8d164da66fd1207a9490b689907a32d03e4828ed6a4a9c2a"})
syz_usb_ep_write(r2, 0x6, 0x55, &(0x7f0000002500)="247c9b18d30e33cada1d48cbd9aa36b317e9b4e98510d630962608ffd3a9112ff57cc610cbfe87eb5565b7781d6420bbfcbf63194bc095ee346f30175eaa63c43227eb118613478a2314efb16cb4dc41c24e4d5797")
syz_usb_control_io(r2, &(0x7f0000002900)={0x2c, &(0x7f0000002580)={0x20, 0x9, 0xf3, {0xf3, 0xf, "d52fd064aabac700b55daf4c3cffff66d02a6f16f1ca68defd187e7f2b0e089ab0a72676749e5742a3ccd0946abf01bf1f399e274a343a533e3576c21eee5bf7e7b402880674c879837db865654204fa703291be4770fef8eea03334138ef0b989ff1f015d1c5ab73dfff8eb5b064e333ecd85c4b3dce67d8d17990a0e5d9dc07cd1850b91acf93393f0939304eaf2016fdfc40d6515b7d5ee7ef044868eee30cec60f17e4d0d4a56258f4c97ad91d2ed2ddc0c8c5019ce7d41fbe52d1238f8b11c10b3e7abeac35f4f0315abe240bfb2accdb37964621b7ef637a503a73e99d72707130b08c81bad552f508f1e9a8d176"}}, &(0x7f0000002680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000026c0)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@ptm_cap={0x3}, @generic={0x69, 0x10, 0xa, "6c7e77e729a3e31b467d9a3294954883268b53faeb06a16f6f6e115f45801c112b458081b1ade911b280ec949aa1311bc562ea14e04607387c1e2720288f9eab263b662a281e821d7739b1b82a8d4bfe1df0c88a2eb34c4072a257652ab54263321269dbf990"}, @generic={0x29, 0x10, 0x4, "2dd679f7a270f012b7f89607d27db6e8af13a86db4be5b221e783b98b8135d3e60fc0991d450"}, @generic={0xfb, 0x10, 0x3, "06eac6a36753dba4e529fe71362ab57e72abb2621be44e69f71e4cd06b9398ce5c320e1a98e1bb62e5e10562350cf840f4af06a551c2c70b39de0532395a48296fa72629d18da2f0d45d945e221ba6c92e9ec096ed0d49849ab585b06f3dd3cb93de848d3338fab5648055478cd11e63e94fb2fa74328e43e6b08f3880fdf5b797b55144428aa59eba81f5d5dfa086700aa8444f3917570695f9370c25a231594976e3f46913b9824274da668a607eaa7a2958840ccb02e4d3f1563d50af70499d00bc1c63c7aa908ae411fb8caea157cbfae0b27a23ddd2baf7a9795344a025a8d809544ced95fab394de878d00c6d43cd6224d3bf3a2ee"}]}}, &(0x7f0000002880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x1b, 0x1, 0x0, "c3da9dd3", "49b8a637"}}, &(0x7f00000028c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x0, 0x7f, 0x9, 0x7, 0x4}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002940)={0x20, 0x8, 0x1c, "c63e453a2bde87eb3737a259c6c3dc85a3a9aa94f9fd65cfadd1dd1e"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x2, 0x4, [0xf00f]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0xd5b8}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "f3da"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002b80)={0x40, 0x13, 0x6}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "0c9c"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0xfe}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002d00)={0x40, 0x21, 0x1}})
syz_usb_control_io$uac1(r5, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0x2, 0x96, {0x96, 0xd, "5ba6b421ef64da824889a11ecb0d94b7cfceec12b1a156430f524e9b355015ed1fbf4135626601da4f6aca89bd6a97a7e3c3c357e10765d124c805e9f2bbd72eb34c8e4350cfb0aea801930a19c5feec34362557c7d3616d8a1d853398f0a350388f73034b25f281ee3e13dc8883c53412af58271c40ab6080b4fc3bd53c76cd780d12b8732407805426115c2079a29cd621929e"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000003200)={0x44, &(0x7f0000002f40)={0x20, 0x31, 0xcf, "25ea09078acce2420fce1206c4c96e3e8e471bbb69e9e21eb8af4df4a0004ecde4fd3b6774a37c890cdf7b96f791c69adc17ef8d9ab1a379b9302ac66d4d557d178c013220f00f188f1b3745234f013a88b6b02dfd2b9922b0aacd5de370b944ea1b2057bc255f9c18bc5f8e148b86f1bc63d2077f3e35b0b15e72a7d7fddf2519611179ce6098015d46b35472489c44b41311fa2764e8ffb910b91e125eff9c879a5fbbb413627f26f1fee99ca4821cb21d93278ebd39610bc6c4f39b2322fc459dc13a08c823c3c2424ae39d02ed"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000030c0)={0x20, 0x81, 0x2, "b5a5"}, &(0x7f0000003100)={0x20, 0x82, 0x1, "89"}, &(0x7f0000003140)={0x20, 0x83, 0x3, "0e249c"}, &(0x7f0000003180)={0x20, 0x84, 0x1, '<'}, &(0x7f00000031c0)={0x20, 0x85, 0x3, "1a8a28"}})
ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000003280))
r8 = syz_open_dev$evdev(&(0x7f00000032c0), 0x7, 0x8200)
ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000003300)=""/157)
read$hidraw(r1, &(0x7f00000033c0)=""/128, 0x80)
syz_usb_control_io$printer(r2, &(0x7f00000034c0)={0x14, &(0x7f0000003440)={0x0, 0x10, 0x1a, {0x1a, 0xd, "3f757ed882ccbdb2563b3b5ca69f3e15ab27fbfb284c3461"}}, &(0x7f0000003480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000003740)={0x34, &(0x7f0000003500)={0x0, 0xe, 0x5, "12d3f64bd4"}, &(0x7f0000003540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000003580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000035c0)={0x20, 0x0, 0xf5, {0xf3, "0ea7c8008ef26143149635411a5e999376516de27c17dc4770e96952ab4f17d71ce7bc6f0b3a009eafd8addf705514d5405654f6056fd602c65aa939878bba6f8fb06aed6113a16edbb84fd616413658721232bc807c3d2b8ac49c91b5ad26bf58110332bb9eb34906c4e81045c9e2a86134390d071881f8c86bbccd9df2abfe793a7fa6772e7151fc01c9679dd77a88b1dd4921a7471cac3b86f21e033666e5fb559d141e05d750a187a0f552bd1377230f0913cea75ef3ffe304c91ab54afb118ca25b33676453ae60247f1db58015e6be8259f35e354f5a30268e16c469e43a96300386f52e7670eba6af97809e04b60ac0"}}, &(0x7f00000036c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003700)={0x20, 0x0, 0x1, 0x1}})
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000003780)={0x8, 0x0, 0x8, 0xffffffff, 0x0, 0x5})
ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000037c0))
syz_usb_control_io$lan78xx(r5, &(0x7f0000003900)={0x14, &(0x7f0000003800)={0x0, 0x30, 0x59, {0x59, 0xe, "b22acf731b83ba374d1311ac2bf283716ca0485220392af6ad14205c71d323ac8ae1153e88d078f004fd4a6b736c22fe591f87b302177d0722a4c97f2ffc93f4c11a7b011fb96aa66a4274c7b197cda6353468d35dc2c5"}}, &(0x7f0000003880)={0x0, 0x3, 0x70, @string={0x70, 0x3, "ce4f9e8329706ae06e7dd0d5bb0523df424a4d7871860336688d0364ee086270837dca935276a01802237f636a0069868e83cdab75be9003af8be076c50d76ba0dced656725474c9bf8af54919733bf94d3c05ddb3ba560ab6e48966873968364052cb5533cd89022b3467d2538d"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003940)={0x40, 0x16, 0x35, "d711fd192258f1ec1638a1679bee7d5f3ea6fe7ced37ce4488805ed9de3b2314f832b65d2ff63d9705c06c7a020eb56f92851a1e1d"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000039c0)={0x0, 0x8, 0x1}, &(0x7f0000003a00)={0xc0, 0xa1, 0x4, 0xc}, &(0x7f0000003a40)={0x40, 0xa0, 0x4, 0x40}, &(0x7f0000003a80)={0xc0, 0xa2, 0x2f, "9fc466298528f12223401bd467522fdb2e385abe368cb0f6ee5c37790ad684f29864981d415bc8f3f13125b104781b"}})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-write$hidraw-ioctl$HIDIOCGRAWINFO-ioctl$HIDIOCGRAWPHYS-syz_open_dev$hidraw-read$hidraw-syz_usb_connect$midi-syz_usb_ep_write$ath9k_ep1-syz_open_dev$hidraw-syz_open_dev$hidraw-ioctl$HIDIOCGRAWINFO-syz_usb_connect$midi-syz_usb_disconnect-syz_open_dev$hiddev-ioctl$HIDIOCGREPORTINFO-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-ioctl$HIDIOCSUSAGES-ioctl$HIDIOCGFEATURE-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-ioctl$HIDIOCGVERSION-syz_open_dev$evdev-ioctl$EVIOCGSW-read$hidraw-syz_usb_control_io$printer-ioctl$EVIOCSABS20-ioctl$HIDIOCGRDESCSIZE-syz_usb_control_io$lan78xx
detailed listing:
executing program 0:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800)
write$hidraw(r0, &(0x7f0000000040)="caaf5d1130d55c3f91cc7b6093", 0xd)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/135)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000140))
r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x0)
read$hidraw(r1, &(0x7f00000001c0)=""/201, 0xc9)
r2 = syz_usb_connect$midi(0x6, 0x61, &(0x7f00000002c0)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1, 0x60, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0xce, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x3, 0x7, [{0x19, 0xc8}, {0x7, 0x7}, {0x3b, 0x9}, {0x8, 0x5e}, {0x56, 0x7}, {0x0, 0x7}, {0x2}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x4, 0x3, {0x11, 0x25, 0x1, 0xd, "b7c6959942c06a29856314d4c3"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x8, 0x4, 0x3, 0x10, 0x5}, 0x8, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0xac, &(0x7f00000003c0)=@string={0xac, 0x3, "6eec593e498df795b15e4473f47f49f8d5ddc096cafff17c9b752de1bcb6827c3ad93bfd4c0da682d179753f6685ae90062179b793e582dcaddb557dc8c529613ffad17cd0d7429cb5da2777d4c7f26c2154f3ffa105bca28da90ae9442b1bd3b75cd5458416842e3405a1e944a5dd14ad48e0303c2bfcb41cbeddf98991b43887d8e717157d672b9b94ab4116c2a9d41c96ea1ca7209d8c316540992190e7d63dd67a0e75770d84a102"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0xa9, &(0x7f0000000580)=@string={0xa9, 0x3, "c81fe0d5fc03fd3f42bbd0ffecb839319943158c55ed0a353a5d9e0894497d7b139ebabba08dfdff2a472f20dd58dcfe2ace1f6bfe9e7016fd81e43d5e0717b09cf8d1900e02481aa7db65f2d6324adc548089daace8114b9de021d12f1e12043b0ccfd618f754f282b4bf7f9fd8bbab3048c7fb6bb7b2a6d6b5d132010f23a806a87c4ebfab64b641b86a9515a70b54a75a18f6bf2a90eb70d3799cee46fecab294fd6aae7785"}}, {0xd0, &(0x7f0000000640)=@string={0xd0, 0x3, "3901c60dccf94cb3aa83b42319cee55bc5dfdeb33f5fd6c7eaa4029363f49ebaf29940820925dc2596ec414b2f9850f01a0651d9dcc419952de8621839fbe46659e816e4561019969112eb7638d1216200c80c0583a6fbf624de8d76f39939e0d4e3aa2d81bd7ec35d1b7599894bff542525d6137afdb4d6a4d687a9af50c019a6c579422d23d1a92da761919fdcd2dc46add12e9fe84da1e73362e6c974ecfd1b47c28cf0e03075235770b6d6b8ec85c52ddeeaef53f99bb77678a6a826c298e766c861d36f649233ebedbac56f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x813}}, {0x76, &(0x7f0000000780)=@string={0x76, 0x3, "0247fca9de82ab7a2c618bc751167f4bbe6e06618d01babf4ee12283946593f0e80f8b7188d55f6452c295c423be617c94efe74aecb232cc5eb6b53b9f48c9455a592c542e9859346b0a55e5002cf7f2bb4ac651dde8e0bc63e354d93b5385f5b46732a11c73a66d18e38628a5ccdc661f52d075"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3c8, &(0x7f0000000900)={[{}, {0x95, 0x4e00, "301ac046f1172115c63f147555e5b3e227f3d9fb4c53ec23cb950c6a821499d3fc2b88b60a45cb61c1fef9416dfd96a5d4743108ede9497251007c0350bc3c9948b7b14963dcf99fcbdec3392145b02b283b5082f52fece805a61e4bcc540fc005722755b0f99289eb717e660f84326985f0a580aee105c4cb2c31e34374722a2032c1e8ede50d9eeac1af468d68c2ff7300e66dc0"}, {0x4, 0x4e00, "8fb78a69"}, {0x78, 0x4e00, "ee0e51dccd714f7b34dd1fb224136d60e9e51dcb95f89dbd26b5803581e0a8c95ecb3053ade63b3d6f67f14cfd8e70e7d0919041c611dffb044e2a666d19788e06d573407bf52b081fa14b52788b602ee2ae9eec7491c38d8d461f0a062984f25761d9d1cec956c61dcb567911483b6c6c064f3fb3cfe360"}, {0xfd, 0x4e00, "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"}, {0xf8, 0x4e00, "ea290c2e4ce88336b261a96c07fd7cb9f36987308c1ef5ada778c5931dd3553ffe548a6a3e11e2f99da5269c8b89478c11ad9f03f0f59efa98367ea332e36e6528dd32f9d98a1af6f506edeaa19440a34ac49bb50a41ae70aa689a2801151a62b33461c952d360665cd0fea7d7f205ab5ebae5a853b58f77b20c7c406566387971f31fe894f5304d008ed30911f72f816983c9a9d1b42296a0dd9f372959fc231dcca8c94b194aa21823f69b89ee20b8bd0cd4634511828e1c68727ac2bc804aa8b47b99808db6ed62e390252788860e4b240df8fc193427c64b94bfac30ca66363605f595ad599e5e2e61539658b70ae1911340e15c09ab"}, {0x9e, 0x4e00, "2ca615a2414e6c271ac24894ac0e8527a2aff4552671ea36279b9e34b815c7f327bb4c0301cae45ad7a0a91a25cb21e8f3bbbe25f2f68b50cd16ca6cf490988a19b85f18168eab1bb4c987e34c00d4690448f9f90039bba1ee7b3445f6214535babdcd01533e20256ab97ebff66beb7734909560560b09c9993858c67b5124c6ba6b7bbc959b67da82347a71e7a7a485c9538aa74e06293d2c3649ee5606"}]})
r3 = syz_open_dev$hidraw(&(0x7f0000000d00), 0x6, 0x80000)
r4 = syz_open_dev$hidraw(&(0x7f0000000d40), 0xc259, 0x0)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000d80)=""/235)
r5 = syz_usb_connect$midi(0x5, 0xb6, &(0x7f0000000e80)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x1, 0x1, 0x3, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x8, 0x1, [{0x4, 0xd}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xa0}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x7f, 0x2}, {0x1d, 0x7}, {0x80, 0xff}, {0x8, 0x81}], 0x9}], [{{0x9, 0x5, 0x35fb1c2d00e679e5, 0xc, 0x200, 0x3, 0x7, 0xd, {0xf, 0x25, 0x1, 0xb, "e31c518806825f11aa806c"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x7, 0x7, 0x2, {0xc, 0x25, 0x1, 0x8, "6e44f2bbb12f54fc"}}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x7, 0xd, 0xd, {0xa, 0x25, 0x1, 0x6, "c157c529f4f6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x75, 0x8, {0x12, 0x25, 0x1, 0xe, "218a636f6f1ccd429ca9aaedc5bc"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0xa, 0x1, 0xc2, 0x20, 0xb}, 0x19, &(0x7f0000000f80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6b22f53732c818d1d86b4bb6862a81c7"}]}, 0x8, [{0x4f, &(0x7f0000000fc0)=@string={0x4f, 0x3, "579c5b323ee1ec8cea9f0069ae46d5230a653589fcce49c7a2c7a8df5ad866fd7b2356b98fe2b92c43569267f6d1a007966a42bf46c76d43ff207552f55049d30dc6d9764c1bd25cb720ab94e2"}}, {0x4, &(0x7f0000001040)=@string={0x4, 0x3, "5d14"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1c09}}, {0x22, &(0x7f00000010c0)=@string={0x22, 0x3, "cb5579b514b7025e1fdd467d63581a8af794b3e80f4324397bd5e8b9bbea0021"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x438}}, {0xf7, &(0x7f00000011c0)=@string={0xf7, 0x3, "087dc1eb9b4f0bc1dcfa590860d282b6cd6390d30f38e3352d68c1448f3272283fe345f4a655c8e13346a5aed49e0b7585300f0e3ecb726aad76e2ce40559c6e3c580fee8c543939759e91b6a7aab65f28c6e469f6e08f7205f49fa610d6bb611478827d7de6308d970fdf0a006a25e7229590e80d3c23c75f08192389862c47a458fef2520bb24e8a709bab51cd98e72a839e990dd3378e62bfed2aeed41d200d468200c9e2a84f390a667e8e9fefde17eaf2a04880aaabba510d36005d6887c0c48686fb6c6d19fa2990399113fabcd58a48011cd835161041b635fbca2d6ac28899cb7331a47b174577c344dbf900e0fd9840fe"}}]})
syz_usb_disconnect(r5)
r6 = syz_open_dev$hiddev(&(0x7f0000001340), 0x9, 0x181081)
ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000001380)={0x3, 0x1, 0x780000})
r7 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3, 0x2c00)
ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000001400)=""/8)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000001440)={{0x3, 0x200, 0x4, 0x6, 0x2, 0x8}, 0x3b0, [0xffff, 0x1000, 0xfff, 0xa, 0xa30, 0x7, 0x401, 0x5, 0x7ff, 0x4, 0xc71d, 0x3, 0x915, 0x1, 0x2, 0x9, 0xa, 0x1, 0x7, 0x8, 0x9, 0xfffffffd, 0x4, 0xfffffffd, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0x5, 0x91, 0x3, 0x6, 0x0, 0xffffffc0, 0x2, 0x311, 0x1, 0x9, 0x400, 0x8, 0x9, 0x3, 0xd66, 0x771, 0x1, 0x2, 0xebd, 0x7af, 0x4, 0x6, 0x9, 0x1967, 0x80, 0x1000, 0x9, 0xfcbb, 0x5, 0xe, 0x6, 0x0, 0x6, 0x2, 0x4, 0xa, 0x1, 0x4, 0x101, 0x7, 0x60, 0x7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x3, 0x29, 0xfffffff8, 0x6, 0x2, 0x8, 0x20, 0x8, 0x1, 0x8, 0x7, 0x5, 0x0, 0x1ff, 0x6, 0x9, 0x0, 0x10001, 0x5, 0x802000, 0x4, 0xffffffff, 0x800, 0x4, 0x5, 0x7, 0x3, 0x1ff, 0x5, 0x5, 0x7, 0x5, 0x10000, 0xff, 0x2fd, 0x5, 0x0, 0x80000001, 0x8, 0x98, 0xc, 0x8, 0x21, 0x6, 0x3, 0x2, 0x3, 0x6, 0x87, 0x4, 0x0, 0xffff, 0x6, 0x7, 0x81, 0x9, 0x7f, 0x7, 0xffffffff, 0x44, 0x7fffffff, 0x1, 0x2, 0x8, 0x6, 0x1, 0x28b9, 0x9, 0x2, 0x0, 0x4e17, 0x200, 0x4, 0x6, 0xffff7ee9, 0xc1ec, 0x3ff, 0x38, 0xf246, 0x3, 0x2, 0x1, 0x0, 0x2, 0x56a9, 0x1, 0x1000, 0x0, 0x2, 0x7, 0xff, 0x7, 0x8, 0x3, 0x80, 0x6, 0x0, 0x400, 0x800, 0x80000001, 0x6, 0x7fff, 0x1, 0x22, 0x8, 0x7, 0x6, 0x6, 0x2, 0x6, 0x1, 0x32a7fed9, 0x8001, 0x3c29, 0x3, 0x99, 0x1, 0xfffffffa, 0x6, 0x2, 0x7, 0x10, 0x200, 0x4, 0xb, 0x0, 0x80, 0x4, 0x2, 0x6bfb, 0x1, 0x9, 0x400, 0x8, 0x3, 0x924, 0x72, 0x0, 0x9, 0x63, 0x7, 0x800, 0xd4e, 0x0, 0x5, 0xcdba, 0xecd9f1, 0x9, 0xa7c, 0x62, 0x77e6, 0x8, 0x80000000, 0x4e, 0x7f, 0x26, 0xdb6, 0x1, 0x61db, 0xb9, 0x101, 0x7, 0x3, 0x401, 0x10, 0x3ff, 0xc60, 0x3, 0x6, 0xe, 0x2, 0x4, 0x2000200, 0x2, 0xf, 0x7ff, 0x3, 0x0, 0x0, 0x80000001, 0x7f, 0xd0, 0x7fffffff, 0x6, 0x6, 0x9, 0x93a00000, 0x7fff, 0x3, 0x81, 0x32e, 0x2, 0x0, 0x99, 0x7, 0x8, 0xfffffffb, 0x5, 0x9, 0x401, 0x2, 0x40, 0x1000, 0x7, 0x3, 0x5, 0x8ecb, 0xffffffff, 0x5, 0xffffffbe, 0x7, 0xfff, 0x4, 0x4, 0x401, 0x10001, 0x6, 0xa78, 0x0, 0x2, 0x6, 0xfffffffd, 0x1, 0x3, 0x2, 0x0, 0x7, 0x10001, 0xc4, 0xffffe043, 0x2, 0x2, 0xfffff000, 0x3ff, 0x4bc, 0x9, 0x63c, 0x100, 0x741, 0x3, 0x1, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x0, 0x4, 0x2, 0x9, 0x5, 0x7ff, 0x8, 0x65, 0xff, 0x800, 0x5, 0x10000, 0x10, 0x2, 0x45, 0x2, 0x4, 0x4, 0x9, 0x0, 0x6, 0x5, 0x4, 0x3, 0x5, 0xa40, 0xffffffff, 0x7, 0x3, 0xff, 0x6, 0x100, 0x7f, 0x7, 0x9, 0x1d2, 0x40, 0x101, 0x4, 0x10, 0x3, 0x1, 0x0, 0x7ff, 0x8, 0x7, 0x7ff, 0x9, 0x7475, 0x7fff, 0x6, 0x7, 0x4, 0x0, 0x6, 0x1, 0x9, 0x1000, 0x2, 0x2, 0xb, 0x1, 0x4300, 0xd3c0, 0xfffffffb, 0x3, 0xa448, 0x7, 0xbaf2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x100, 0x2, 0x7, 0x5, 0x100, 0x0, 0x100, 0x4, 0x3, 0x192500, 0x0, 0x3, 0x9, 0x4, 0x6, 0xffff8001, 0x2, 0x9, 0x4, 0x6, 0xe, 0x10000, 0x0, 0x1, 0xc5, 0x6, 0x6, 0x1000, 0x9, 0x4, 0x0, 0x0, 0x2, 0x5, 0xffffffff, 0x7, 0x973b, 0x70, 0x1, 0xa3, 0x3, 0xff, 0x6, 0x0, 0x100, 0x7ff, 0x6, 0x3, 0x1, 0x1a0, 0x9, 0x0, 0x65, 0x10000, 0xdd59, 0xa81, 0x6, 0x5, 0x7f, 0x6, 0x6, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0xffffffff, 0x10, 0x9aa, 0xb20, 0x1, 0xab, 0x10001, 0x4, 0x8, 0x99f8, 0xb, 0x7, 0xf, 0x4, 0xc, 0x4, 0x1, 0x8, 0x1, 0x10, 0x8, 0x7, 0x3ff, 0x0, 0x9, 0x9b, 0x1, 0xffff7fff, 0x5, 0x6, 0x5, 0x9, 0x6, 0x7, 0x600, 0xffff6a0b, 0xc, 0xffff, 0x3, 0x4, 0xffffffff, 0x81, 0x6, 0x7, 0x1, 0x40c, 0x3, 0x0, 0x6, 0x1ff, 0xa, 0xf5795e5a, 0x3, 0x8, 0x4, 0x3, 0xa943, 0x9, 0x80000001, 0x6, 0x1, 0x7, 0x0, 0x7, 0x1, 0xe, 0x6, 0x1, 0x3, 0x7f, 0x3, 0x101, 0x4, 0x1, 0x10001, 0x7, 0xffffffff, 0x5, 0x2, 0xfff, 0x1, 0x6, 0x80000000, 0xe6f, 0x1, 0x0, 0x8, 0x6, 0x8, 0x2, 0xffff, 0xa1, 0x0, 0x5, 0x9f5, 0x8, 0x3, 0x40, 0x4, 0x8, 0xe6f5, 0x0, 0x2, 0x0, 0x1ff, 0x5, 0x1, 0x7, 0x10000, 0x6baf, 0x3, 0x8000, 0x1, 0xfffffffb, 0x2, 0xeed3, 0x8, 0x3, 0x5, 0x600, 0x7ec8, 0x2, 0x6, 0x9, 0xb, 0x5, 0x2, 0x401, 0x80000000, 0x4744, 0x10001, 0x0, 0x4, 0x2, 0xed2, 0x3, 0x3, 0x8533, 0xa0b, 0x7fffffff, 0x3, 0x2, 0x1, 0xe8, 0x100, 0x9, 0x4, 0x10, 0xfffffff7, 0x8, 0x3, 0x0, 0x510, 0x0, 0x3, 0xb, 0x2, 0x8, 0x7, 0x101, 0x3ff, 0x5, 0x1, 0x8001, 0x0, 0xffffffff, 0x8, 0xfff, 0x400, 0x80, 0x53f5, 0x7ba, 0x1000, 0x6, 0x100, 0x26, 0x5, 0x1, 0x2, 0xffff, 0x1, 0x6, 0x2, 0x6, 0x9e0, 0x2, 0x3, 0x3, 0x1ac12aea, 0x9, 0x2, 0x5, 0xfffff000, 0x8, 0x84e7, 0x54b8, 0x8, 0x400, 0x7, 0x8, 0x1, 0x0, 0xf, 0x5, 0x1, 0x48, 0x200, 0xd, 0x3d2a, 0x0, 0x7, 0x1, 0x4, 0x7fff, 0x800, 0x6, 0x0, 0x7b, 0xca, 0x1, 0x1, 0xf, 0xa, 0xffff31dc, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x6, 0xb7, 0x66, 0x7, 0x9, 0x0, 0x5, 0x4ac50617, 0x6, 0x2, 0x2, 0x6, 0xb3c, 0x0, 0xfffffffa, 0x8f, 0x800, 0x8bc, 0xffffffc0, 0x69, 0xffff, 0x5, 0x52a5, 0x6, 0x7, 0xc5, 0x4, 0x10, 0x1ff, 0x8000, 0x8, 0x9, 0xffffff41, 0x6, 0x6, 0x1, 0x67, 0x7, 0xfffff691, 0x3, 0x8, 0xfffffffa, 0xc7, 0x10001, 0x80000000, 0x3, 0xffff, 0x51f0, 0xa, 0x8001, 0x7, 0xe82f, 0xf, 0x101, 0x2, 0x101, 0x9, 0x80, 0x22, 0x4, 0xffff, 0x9, 0x3, 0x3ff, 0x6, 0xd6, 0x6, 0x5, 0x21, 0x2, 0x8, 0xe, 0x800, 0xcd, 0x5, 0x6, 0x80000000, 0x5, 0x73fc, 0x4, 0xea9c05a, 0x6, 0x7, 0x57, 0x7, 0x3, 0x2d, 0x6, 0x2, 0x6, 0x4, 0x6, 0x8, 0xffff, 0xad, 0x2, 0x8, 0x0, 0x80, 0x3, 0x8, 0x2, 0x878b, 0x100, 0x7, 0x1ff, 0x79, 0x200, 0x3, 0x4, 0x9, 0xffffffa3, 0x101, 0x6, 0x2, 0xf8, 0x100, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x5, 0x0, 0x6, 0x7, 0x100, 0x0, 0x8, 0x9, 0x1, 0x4, 0x8, 0x101, 0x1, 0x4, 0x81, 0x4, 0x5, 0x2bc5, 0xb, 0x9, 0x0, 0x40, 0xbc, 0x8, 0x1ff, 0x3, 0xf30, 0x3, 0x5, 0xfffff965, 0x44dd, 0x7fffffff, 0x8000, 0x9, 0xf1, 0x80000000, 0x4, 0xffffffff, 0x0, 0x1, 0x7, 0xf4, 0x7, 0x1, 0xfb, 0x4, 0x48, 0x7fffffff, 0x7ff, 0x2731, 0x3, 0x6, 0xc00, 0x1000, 0x3, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x3, 0x5, 0x5, 0x1, 0xc00, 0x6, 0x1, 0x9, 0x200, 0x4e5c, 0x80000000, 0x3cc8b1f4, 0x1, 0x0, 0x401, 0xffffff0b, 0x42c3, 0x3, 0x9, 0xd, 0x9, 0x4, 0x1, 0xffff, 0x1, 0x4e39, 0x8, 0x80000000, 0x8001, 0x6, 0x9, 0x7fff, 0x8, 0xfff, 0x9, 0x4, 0x100, 0x2, 0x2, 0x7, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x61d, 0x3, 0x5, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x4, 0x8000, 0x7f, 0x3, 0x3a75, 0x7, 0x1, 0x100, 0xfff, 0x800, 0x0, 0xe, 0x47d9, 0x9, 0x3, 0x5, 0x4d04, 0x6, 0x120, 0x2, 0x6, 0xfffffffa, 0x9, 0x2, 0xf133, 0x0, 0x8, 0x3, 0xffffffff, 0x2, 0x0, 0x781e, 0x0, 0x4, 0x1, 0x9, 0x9, 0x99, 0x9afc, 0xfffffff3, 0x976d, 0x8, 0x200, 0x100, 0x2, 0x5, 0xfffffbff, 0x7ff, 0xf, 0xc7, 0x1, 0x6, 0x80000001, 0x2, 0x7, 0x8, 0x7, 0x3e268a1f, 0x4, 0x929a, 0x2, 0x2, 0x10000, 0xe, 0x4, 0x3, 0x7, 0x9, 0x3, 0x2255, 0x62, 0x8, 0x45e, 0x9, 0x9, 0x2, 0x2dc, 0x0, 0x10001, 0xec8, 0x9, 0x9, 0x2, 0xf79e, 0x5, 0x2, 0x4, 0x10001, 0x1, 0x5, 0xded, 0x31]})
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000002480)={0x6, "33878ece3ed0722983b73970f7e3bd819354d537842749a66d129fcf538215e048ba20f39de3441d8d164da66fd1207a9490b689907a32d03e4828ed6a4a9c2a"})
syz_usb_ep_write(r2, 0x6, 0x55, &(0x7f0000002500)="247c9b18d30e33cada1d48cbd9aa36b317e9b4e98510d630962608ffd3a9112ff57cc610cbfe87eb5565b7781d6420bbfcbf63194bc095ee346f30175eaa63c43227eb118613478a2314efb16cb4dc41c24e4d5797")
syz_usb_control_io(r2, &(0x7f0000002900)={0x2c, &(0x7f0000002580)={0x20, 0x9, 0xf3, {0xf3, 0xf, "d52fd064aabac700b55daf4c3cffff66d02a6f16f1ca68defd187e7f2b0e089ab0a72676749e5742a3ccd0946abf01bf1f399e274a343a533e3576c21eee5bf7e7b402880674c879837db865654204fa703291be4770fef8eea03334138ef0b989ff1f015d1c5ab73dfff8eb5b064e333ecd85c4b3dce67d8d17990a0e5d9dc07cd1850b91acf93393f0939304eaf2016fdfc40d6515b7d5ee7ef044868eee30cec60f17e4d0d4a56258f4c97ad91d2ed2ddc0c8c5019ce7d41fbe52d1238f8b11c10b3e7abeac35f4f0315abe240bfb2accdb37964621b7ef637a503a73e99d72707130b08c81bad552f508f1e9a8d176"}}, &(0x7f0000002680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000026c0)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@ptm_cap={0x3}, @generic={0x69, 0x10, 0xa, "6c7e77e729a3e31b467d9a3294954883268b53faeb06a16f6f6e115f45801c112b458081b1ade911b280ec949aa1311bc562ea14e04607387c1e2720288f9eab263b662a281e821d7739b1b82a8d4bfe1df0c88a2eb34c4072a257652ab54263321269dbf990"}, @generic={0x29, 0x10, 0x4, "2dd679f7a270f012b7f89607d27db6e8af13a86db4be5b221e783b98b8135d3e60fc0991d450"}, @generic={0xfb, 0x10, 0x3, "06eac6a36753dba4e529fe71362ab57e72abb2621be44e69f71e4cd06b9398ce5c320e1a98e1bb62e5e10562350cf840f4af06a551c2c70b39de0532395a48296fa72629d18da2f0d45d945e221ba6c92e9ec096ed0d49849ab585b06f3dd3cb93de848d3338fab5648055478cd11e63e94fb2fa74328e43e6b08f3880fdf5b797b55144428aa59eba81f5d5dfa086700aa8444f3917570695f9370c25a231594976e3f46913b9824274da668a607eaa7a2958840ccb02e4d3f1563d50af70499d00bc1c63c7aa908ae411fb8caea157cbfae0b27a23ddd2baf7a9795344a025a8d809544ced95fab394de878d00c6d43cd6224d3bf3a2ee"}]}}, &(0x7f0000002880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x1b, 0x1, 0x0, "c3da9dd3", "49b8a637"}}, &(0x7f00000028c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x0, 0x7f, 0x9, 0x7, 0x4}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002940)={0x20, 0x8, 0x1c, "c63e453a2bde87eb3737a259c6c3dc85a3a9aa94f9fd65cfadd1dd1e"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x2, 0x4, [0xf00f]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0xd5b8}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "f3da"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002b80)={0x40, 0x13, 0x6}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "0c9c"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0xfe}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002d00)={0x40, 0x21, 0x1}})
syz_usb_control_io$uac1(r5, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0x2, 0x96, {0x96, 0xd, "5ba6b421ef64da824889a11ecb0d94b7cfceec12b1a156430f524e9b355015ed1fbf4135626601da4f6aca89bd6a97a7e3c3c357e10765d124c805e9f2bbd72eb34c8e4350cfb0aea801930a19c5feec34362557c7d3616d8a1d853398f0a350388f73034b25f281ee3e13dc8883c53412af58271c40ab6080b4fc3bd53c76cd780d12b8732407805426115c2079a29cd621929e"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000003200)={0x44, &(0x7f0000002f40)={0x20, 0x31, 0xcf, "25ea09078acce2420fce1206c4c96e3e8e471bbb69e9e21eb8af4df4a0004ecde4fd3b6774a37c890cdf7b96f791c69adc17ef8d9ab1a379b9302ac66d4d557d178c013220f00f188f1b3745234f013a88b6b02dfd2b9922b0aacd5de370b944ea1b2057bc255f9c18bc5f8e148b86f1bc63d2077f3e35b0b15e72a7d7fddf2519611179ce6098015d46b35472489c44b41311fa2764e8ffb910b91e125eff9c879a5fbbb413627f26f1fee99ca4821cb21d93278ebd39610bc6c4f39b2322fc459dc13a08c823c3c2424ae39d02ed"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000030c0)={0x20, 0x81, 0x2, "b5a5"}, &(0x7f0000003100)={0x20, 0x82, 0x1, "89"}, &(0x7f0000003140)={0x20, 0x83, 0x3, "0e249c"}, &(0x7f0000003180)={0x20, 0x84, 0x1, '<'}, &(0x7f00000031c0)={0x20, 0x85, 0x3, "1a8a28"}})
ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000003280))
r8 = syz_open_dev$evdev(&(0x7f00000032c0), 0x7, 0x8200)
ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000003300)=""/157)
read$hidraw(r1, &(0x7f00000033c0)=""/128, 0x80)
syz_usb_control_io$printer(r2, &(0x7f00000034c0)={0x14, &(0x7f0000003440)={0x0, 0x10, 0x1a, {0x1a, 0xd, "3f757ed882ccbdb2563b3b5ca69f3e15ab27fbfb284c3461"}}, &(0x7f0000003480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000003740)={0x34, &(0x7f0000003500)={0x0, 0xe, 0x5, "12d3f64bd4"}, &(0x7f0000003540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000003580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000035c0)={0x20, 0x0, 0xf5, {0xf3, "0ea7c8008ef26143149635411a5e999376516de27c17dc4770e96952ab4f17d71ce7bc6f0b3a009eafd8addf705514d5405654f6056fd602c65aa939878bba6f8fb06aed6113a16edbb84fd616413658721232bc807c3d2b8ac49c91b5ad26bf58110332bb9eb34906c4e81045c9e2a86134390d071881f8c86bbccd9df2abfe793a7fa6772e7151fc01c9679dd77a88b1dd4921a7471cac3b86f21e033666e5fb559d141e05d750a187a0f552bd1377230f0913cea75ef3ffe304c91ab54afb118ca25b33676453ae60247f1db58015e6be8259f35e354f5a30268e16c469e43a96300386f52e7670eba6af97809e04b60ac0"}}, &(0x7f00000036c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003700)={0x20, 0x0, 0x1, 0x1}})
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000003780)={0x8, 0x0, 0x8, 0xffffffff, 0x0, 0x5})
ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000037c0))
syz_usb_control_io$lan78xx(r5, &(0x7f0000003900)={0x14, &(0x7f0000003800)={0x0, 0x30, 0x59, {0x59, 0xe, "b22acf731b83ba374d1311ac2bf283716ca0485220392af6ad14205c71d323ac8ae1153e88d078f004fd4a6b736c22fe591f87b302177d0722a4c97f2ffc93f4c11a7b011fb96aa66a4274c7b197cda6353468d35dc2c5"}}, &(0x7f0000003880)={0x0, 0x3, 0x70, @string={0x70, 0x3, "ce4f9e8329706ae06e7dd0d5bb0523df424a4d7871860336688d0364ee086270837dca935276a01802237f636a0069868e83cdab75be9003af8be076c50d76ba0dced656725474c9bf8af54919733bf94d3c05ddb3ba560ab6e48966873968364052cb5533cd89022b3467d2538d"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003940)={0x40, 0x16, 0x35, "d711fd192258f1ec1638a1679bee7d5f3ea6fe7ced37ce4488805ed9de3b2314f832b65d2ff63d9705c06c7a020eb56f92851a1e1d"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000039c0)={0x0, 0x8, 0x1}, &(0x7f0000003a00)={0xc0, 0xa1, 0x4, 0xc}, &(0x7f0000003a40)={0x40, 0xa0, 0x4, 0x40}, &(0x7f0000003a80)={0xc0, 0xa2, 0x2f, "9fc466298528f12223401bd467522fdb2e385abe368cb0f6ee5c37790ad684f29864981d415bc8f3f13125b104781b"}})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac3-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904b1d02cff023000090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_ep_read-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0xc, @string={0xc, 0x3, "acf322afd3a694bf4b82"}}, 0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000338d19e40c6050592d77e01020301090224000172061006090400e802ff34bc03090501024000ff0d030905ca"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="e2")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac2-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000206a05c600000000000001090224000100003070fbffffffffffffff010009210500050122280009058103ff030481"], 0x0)
syz_usb_connect$uac2(0x4, 0xc7, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xbb, 0x20, 0xc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x9, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x5, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x5, 0x1, 0x0, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x6, "25a75e", "b6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x56, 0x0, 0x4, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, "8f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x9, 0x80, {0x8, 0x25, 0x1, 0x0, 0xc, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x2, 0x87, "d70adf43ce7b6b090c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x3, 0x52, 0x6, "06", "88e5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xd2, 0x89, {0x8, 0x25, 0x1, 0x81, 0x3, 0xe4, 0x1}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0xf9, 0x9, 0x40, 0x72}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0xf5, &(0x7f0000000440)=@string={0xf5, 0x3, "abc217e49d61109098dd71da42ba2fb390aeed8338f5334ccd983ae24be910f6ca15197bb0330d685b3de998f3bfdfbb5e8ad6bdf384f0927a773e3c9673d9f702e8bb34632ba1cdbf152287eecf900c76688235b392a4bbc2e58d1f37df122fe8c282a6a090d4125230a0eb3e8b290332f7e506ca19729df5d95639153abaaf983b7c84bf7b9d9377db499389e0036db1a6d33deaef7683ee319b3bae2e92770637935bbf620c66501690becc7f5561b16346e7553bbf4115470f4ba7a48b7f66069eaca71c1469bd897176cd1592dc51f12f4b7c8f207aa3cabeed7e3c7b753e7eb3c0ddd37fb02acbe4c7d3563bd6bfc25f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="2004420000004222f17d3816e9bc787a4d4cdbb3f5bc62b1d6ad5a9a56381b21a60f9dba43b59c23e92812aeb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 27 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [40, 7, 9, 19, 18, 30, 40, 22, 13, 30, 6, 21, 26, 13, 14, 16, 7, 30, 16, 23, 4, 25, 40, 29, 2, 7, 30]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d007001000102030109022700010100804d090400000308065000070501020002000705820200020007058303"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x3, "2660a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x6, "56f1b39b85be"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0) (async)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0)
syz_usb_control_io$sierra_net(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xca, {0xca, 0xf, "f3af812c993f863b66822aeddb04034c5852fcb6cfaf0b74c0ba2c38337638bc8a69af6c9f31e666fe1d674f74cffd713a5a68f0165281ade992ba7c8e65e8ee6adf5b4daeb78e02d22be8b586edd335b51014d10bb0699b53318be7a3e8fcb70cd252381ae1c6d799b4c2e1eaf5f2820fcaebce213b2374f1eefc3b0a6bb454633ff11cf8584b79424e8f95c0d8a61972b718e6993829cd18e49959d0459cca188d0269ff0285010472c7f7543353667cade08b4658d7e044e1971c80e422e41129a7861b33304f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x341e}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000240)={0x20, 0xe, 0x2c, "b743b48a7dbd3f2a66f9a46a6104ada6ad487beff3232fd1c175a2e304e4936d8d5574a949d247a066089665"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "f22568a637b417a990a5b24ad458ce02e58827962fbe67cdf67e8573628e1600e9b0c0ca054c286c1bbb023164a6573c837eb719fd6d2f9d0f7c4a286b5a8cb76658ae4c60dbf60a58562b3569caad11c911e1b4d10e6887e3502a39856e6a7ad719ba0603265878483c68070f4fc26936e1830d68e2840edd81883a853ebd7582dc25c21601e5303371149e7be044aae78b0727510693cfe43b90bac382de4ab10ef024b3c92797d7b82591c849358f9d64c3f29486573547784430594a64e6a327c609d8a7e082f839afbbc359974e95c9838d815abfca46eb889a72e3ce7516486931229ca93131b86e7e04af7abbd8e9de51e78813084814bc41bbee37be47e493f04bf51325533ae5beaf4d64e041f6f67e83ee0b92fa37c4f0291142928610fa7197eba5d45f8830478bc7c0d35ee1a5343c64ec23e28dc078fc7db1ae4669f2aa9670672a90bffd76c1abe1c71ee9839c2865df4363aa52e10418d522d1843d1ae8484625124d0096d8b754d079f5800a7ad323c9b3a2a5591d61d16f52c89c009ccdcb7378bddcd5e93dcdc047adc5db4803d41be64486e6aa2c4ae0fe1917efca3a034adcb68ec9d4a548b5e365d0d20ea9bba9a6a2a4f4b3036ca9808b60fefc003aac99876a6128b296dd29f1b65bcab04ef9f4b0519554fb8265677a62dc5ec6f789e2d4eef1997469cf79890f618655ef10adde98fac45d865b00ba81fbd2cbaaf71972bb435cee1e871fff6688698abb62f473848714014cde459a60452c5798a0ef86219f73cbc8fad63b9b782ed7150ccd04f3914c386d6e1bdad098576b36ad998470c55c90eb3f04bb133c7cdd10ce322724c96242bdd4ec868fba503f0e6fe815f52739d21abaaaf81a6dd84f153da398c06225eeb73e813abf8656a3403f84b5d40a00759e54ee0ae2996dcc6bdbefc3e5483076f53318f5fa25b63e0e2d711179efb0573d13f2e0cde9fd33c2e79a07ef13373e2020ce9d6cd3f8672104e60fa9b344756da28b0399c9e1810f182d21c2f0a0e62718ba4eb3cd5cb0e1826a094fcd7699a66af16ea1b4e3f196dbc4738eb27378be1ade6aadc32badedc7c9d3706044f9ec23c0c4ac15822a01f1705ea2158ec1d5c1afe5093f30490db49ba42e47e0ac50e2a8c828e1a0ec21de8c772193834241df43406cbd15d80847c43c82f841c6f44657f92cb7216a747fc155c52bb3944e322398ab5f318f03640918e5d416c623ffcbe30513a95cd108a6ac051e387c65a1cba569b2597e2375c5d4df4c2ae6c11620266efcea42c622cd452ed188b123e4bee0b47809d5f7fc9aed39a7f3123e131d9b91228b958271d8c4f27e0886790e9730fab5314458d4349a9ec7cb8c0f9a164fa8e7a71c31d5a78c69c71515e4c06b27033597acf488d609f7ac2d6da66ec67f29fcd131ccc7c7f0eff9f9c07aa4"}, &(0x7f0000000940)={0x21, 0x0, 0x4, "efe63c73"}})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r2])
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003003ba9590195143be2000010990421104000010203010902120001010d090400000001033008"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}]}) (async)
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003003ba9590195143be2000010990421104000010203010902120001010d090400000001033008"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}]})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd992d40431950220100010203010902120001000000000904"], 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xaf, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0xcb, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xa, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x4, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x1, 0x4c}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0xfa, 0xc6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0x7, 0x3, 0x10, 0xfb}, 0x73, &(0x7f00000001c0)={0x5, 0xf, 0x73, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x5, 0x0, 0x80, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0xa9, 0xf88f, 0x9, [0xffffcf, 0xc0, 0xf0, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8440c34138e2446940989fbfa20353eb"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x1, 0x7800, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x5, 0xf, 0x8, [0xff0030, 0xc000, 0xff00, 0xc000, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42f}}, {0xba, &(0x7f0000000300)=@string={0xba, 0x3, "75a9744fbdfa6283232d3c2a8f590c63d3187e4c85598ab0c34275f16047e044bc777a2ad151aedf3290e6a95001f918a213c9682b667c9018f7f5a465626d9631d7894f8bb908d3a53ac61ab0e5db78cac5e7e4e5060c4e09cc4b1eb09b41d4106fdf98f8b4eead0e82b156ecf68f6437220669be1c13fe3c6d82478d119b6685c0911b7f2d5cdedf33bdbc5be7259e9eed45419e901ac8c7c882de2a31bca89cb6aff5a348bf0011b34e8ed648a4de8ae6f71a8092e31b"}}, {0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "9b40ff7a099f2b6311761d29a3437fad499e5896aac524c0de50c80b015a23debc9bb81876e06435f142ea4d001540368bec1bda9ecd8116be7e5e3e82ace312599e33c21e"}}, {0x61, &(0x7f0000000440)=@string={0x61, 0x3, "4fe710128d6067eef3a3a405a3c46a8cabe5aab8bac9badb9c23ac9f32ef0df56885b66d291d3071e813332b2e91cc242f17bfaa75ce5678d392435476541a583e97209b80486431f92bd7b22963a20ee57dac1b25b9c239a7ca16824b83d6"}}]})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) (async)
r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="2005010500004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="2005010500004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0) (async)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000040)={0xffe7, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 3:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_control_io$uac3(r1, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x40, 0x1, 0x98, {0x98, 0xf, "d78ef53c657ec19b86e73dc6db1dd4b8a0439ca389e48a4f0f7660f9430d56332ea7861802bf2f111261376edeea198f09aef4c5ddd7588e36f3c913888de731efaeae76aa11459946f4fc2e14fb9edddcf2aa1379153fc21259153c521d1cf3447e0ac0f7aef1daf6f3f7cfab4799554b499cf4f322cd3246c343a2e81955864b59e5e5295c9d86abbceee8de35d96353dc8ece0978"}}, &(0x7f0000000180)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x6, "2d169bf5bdac"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000003c0)={0x20, 0x81, 0x3, ',-0'}, &(0x7f0000000400)={0x20, 0x82, 0x3, "6ed2bd"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "8d99d0"}, &(0x7f0000000480)={0x20, 0x84, 0x1, "c8"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "0501f9"}})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES8], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x49)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x3, 0x100, 0x0, 0x1ff, 0x10000000, 0xa02})
executing program 0:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x3a, 0xe2, 0x2a, 0x20, 0x17cc, 0x1010, 0x24fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xa9, 0xd8, 0x0, 0xdf, 0xf8, 0x68, 0x8}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x10, 0x48, {0x48, 0x21, "50a5b24dbf9fa5b197875cc26fb4b7df5f18bf1f7f1d6857488af11a92ba3cd77d08acd6a767d89639cf296dd9e35700bc6a8e488cd3d87f10531b5906845045c4f6ba2710ed"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000004c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0xb7, "6518013c", "ce3b6487"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0xa, 0x0, 0x7, 0x9e, 0xf}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000600)={0x0, 0x3, 0x71, "dd3d2be064a72d37a5166068f43cb226cbdaf10b7787ceb25e05456e1bc14ca4d4c446e2114034241c02eb046de26bdfd3eb058f37413a617224bbc64700f205925e6a5ff396cdce4f7646e1e75728a1c15ebf585e80d126818b335b378be7ea28df78cdcefafe8e334a1dc675cc21b2df"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x120, 0x80, [0xf00]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x9b81}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "859d"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "3c8b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x280}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x8}})
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x200)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000002e40)=""/186)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x4, 0xd9, {0xd9, 0x1, "98bd03855081909f4c8f42f1589a36a8544d5c3a5a30b36abaf6abb427bdf3dc3a048b5c8558a0242430b3e93a932d4aaec2ec31dd24789ef4ec46bf0f62b1f6b12e2b97c1bc20faa951465564108bc529ae6b9d8fbc48a5619c7c7590c37c05e07f5343b5344332e254cdbbe8b5c014e55e8faaa4b717ba43b457c71a0f9305161e3c1bda5457a1adccc8dd7ae2c944e9daf26f1f67cd1f8bee2ce518ef78adad3a28c3a7536916af23d40b248cc090371100b9350be30a29fbf7ac03933805ce40ca0c0f51ef7ee0015ca7e7b6eb3cc8eb4c3e8387fd"}}, &(0x7f0000000100)={0x0, 0x3, 0x54, @string={0x54, 0x3, "3c74b452c26ea800a9455435ae669aa485f4fd490b582dcb9683edc6c7df0740e43dba72542fd8a9ac3da53fc3c7bebac1990764181eca2051e1a3a8cc9159cfdc2cdc5a2b282acbdc0e3a7ad94244f08ccd"}}}, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="40008f000000178411495b7201a718b81785f8e172eeb2cabb0b534c8b814aadf3ef4bbef1273d490c49b835aa10e7db64f4e3db3837d6928022d34d1ed261e6b71b46c08825f54fc64bd134c0292cf8a757c7393cd3fb176575ab41ccc9439f3838d11dc34d3a98dfb267a90695eb975fe66fe44932dc53bccf18cd7dae3af530e35c74d08823f78d73e4c7778b0b301083d0239d"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0xc0, 0x5, 0x2, 'z`'}, &(0x7f0000000340)={0x40, 0x5, 0x2, "cc45"}})
syz_open_dev$hidraw(&(0x7f0000001340), 0x800, 0x8000)
syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/353], &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x9, 0x8, 0x7, 0xff, 0x3}, 0x20, &(0x7f00000006c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "7c0019bcb5638952ddc7c758efda4155"}]}, 0x4, [{0x7c, &(0x7f0000000700)=@string={0x7c, 0x3, "142c497dcb0672c30a2c60136fa60862dd535124fa23ba51786e0586aa8ea529eae2f78ee9268eba587b21888fe4aec1ad23e7c96db1f98d93d3f61edf2436d03205442ed03e6c3da3d0535abe4237da86bc8863f8e5ababc52d5852a4c9ec55ee49976b8a391e5f74d5fe3d8cfd1fb96dbb9f11f1cc913d2c22"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41f}}, {0x1a, &(0x7f00000007c0)=@string={0x1a, 0x3, "39228668986e4177329ca8a662e6fff732ae5510e470cc5d"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x437}}]})
syz_open_dev$evdev(&(0x7f0000001380), 0x6, 0x10bc7d3efca9000a)
syz_usb_control_io$hid(r0, &(0x7f0000001100)={0x24, &(0x7f0000000f80)={0x20, 0x30, 0x8e, {0x8e, 0x30, "ba48cd3fefbdf3ca9e12b82b3f935b2d0d149d2e396f51c44a1e3b07c764e0699be038196d2fa7f7a91a3dc049d50c94a5040d55a0d0cbed93abc78c88b9580934f33876c94abba0f76627bff1fe54971025b9bca6ee8f0033146ed01e05463eaff0199ef2ed13a703bcabfce2fcd276681e1c76e235eb66cfe7929b0dd7ace976196839d2aafcb8319a1588"}}, &(0x7f0000001040)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e570b25c082620d6c84691e424b988d5ee1c11a8dd6bcc4343068c"}}, &(0x7f0000001080)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xa, "257b0509"}, @local=@item_012={0x2, 0x2, 0x2, '>:'}]}}, &(0x7f00000010c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xf97}}}}, &(0x7f0000001300)={0x2c, &(0x7f0000001140)={0x20, 0x1, 0x1, "8b"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001240)={0x20, 0x1, 0x61, "f4dbbb45cb4eea8a7737a7fa7e301d9770c993f0c921661c408943773b2594968674d7a407bf2f857bf88767a31abea7586ae5f442b4561f6dd4e39bf831fac1cc97cbc36174cd5e60df177faae5ea182247ad96bb5b28eb654628f2260635465f"}, &(0x7f00000012c0)={0x20, 0x3, 0x1, 0x93}})
syz_open_dev$char_usb(0xc, 0xb4, 0x6)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000003300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x0, 0x80, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0xbb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xa475}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd5, 0x4, 0x2, {0xa, 0x25, 0x25, 0x236, 0x8b, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6c, 0x81, 0x6, 0x2, 0x3, 0x7, 0x8000, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x71, 0x43, 0x6, {0xa, 0x25, 0x25, 0x3, 0x2, 0x200}}}}}}}}]}}, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[], 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r2) (async)
r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 3:
syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x4, 0x60, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x48, [], [{{0x9, 0x5, 0x89, 0x2, 0x0, 0x1, 0x4, 0x5, {0x5, 0x25, 0x1, 0x1, '2'}}}]}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x4, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff000000070502020002"], 0x0)
syz_usb_ep_read(r2, 0x2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, &(0x7f0000000e40)={0x14, &(0x7f0000000cc0)={0x60, 0x22, 0xf6, {0xf6, 0x22, "e7a0af69aa8265f69213f74219cef334ed7d430fe8ddb625b318a224eb84fcfcd95ec54c566ad166b46e56eb29d0aaedf80d9f03fa4de755cea10a3536ea1f7f520d7e09e798c83d60eaad09989122e13c691b96e9cfd020a08e9f5f660c1b170e272208bc0838974acef723b905bd46dd135e9dbb1c17675130f1f4b589683b5665d5dedfb1fb36781bf1ccf0f58ad3cb592b15d0c3dad2e185e8a2e4d3f26fe96ef8f7964b4be39b41b049316d97827c7f836d45e03913d09fb84dfbe3b18554f38281c6247bd93ab6d6241c95faeeb28de00e29b12dbc657ce1793d4896c7fd3e6a63dee04d2fe740e54221aee9ca09ff2726"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "0a407a82163b0bc2ae03a5f157d7318eb61e639c38bd00301d5c277f856bec4ecce47d93867c95f41e03705185a7315d932b5d336d35f32ae800"}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000e80)={0x20, 0xdcb2f25d0e2503eb, 0xb2, "c743bf6fd600d03d6aa2b67ffc68786d8768c6abe1dfaf647363b1f51a44ef23b6eb05deb6fc177375feca84a213f3a3509e4b094a3fcc0e1527d7b9c54cca0004a6a8cf801f5273e4d337fb02994fd32067bde6f61cc50cb23d8ca55c0cbb85e3bc3a45472282a4ff31974fcd7fa8392c0630452a98e32dfe99c6dc643fa74f6c8ae032e67de555e171348ea43dfcfc3efee21c70e55036c73f41dd328e960ce9dea28c577ab917ff8e2250c677d9b62a49"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6e}, &(0x7f0000001040)={0xc0, 0x5, 0x6, "73b4d66a1b8d"}, &(0x7f0000001080)={0x40, 0x5, 0x4, "ea33ba94"}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x40, 0x3, 0x3, "7f3088"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x60, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x89, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x7f, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x0, 0xff}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0xb2, 0x7, 0x20, 0xb}, 0x11c, &(0x7f0000000280)={0x5, 0xf, 0x11c, 0x4, [@generic={0xe0, 0x10, 0x1, "1125e7a8e957952e49ee87dc121287706bb2653377526125c1f7b2dde07bc88010c35c1c3b1a0fdd51800571fd0586ab3abe72bc1fab0b013134ccbba1314fc0f5073b4b387e359d1ae3edeb347bc31158cb67192f2d163377fe223d4fa9c71f1a3a2996ce08862ce8343c4f2912fe2f6d36097d96880bafe3b4901602ce4513cb57e5d19c1953ee256e6c0c880363b910ebc623d7c79facb901838786913ec2c4827012f3f67080c792f930fa1916fb454d6c633b3da2aaa59cba5d0e2bae5909312ad07083bbd82b659c96abbc432df218a853e776b8d07e4fe9280f"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x401, 0xf, 0x2, [0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x9, 0x1e00, 0xfff9, [0xff, 0x0, 0xff0000, 0xc0cf, 0xc028, 0xff3fcf]}]}, 0x7, [{0x7e, &(0x7f0000000440)=@string={0x7e, 0x3, "081a28ccc9c49ddba0de9b14f4d5b1257ada2ff2e9882d15b0ddb65e540763060a8e1675fe646ceff3a93c853e04abd5a7469d1bdf754e6b33a69bbf0b07b871ab8acc3c167b81c28c8205b9e29a3474a311f384a00f28377713e806beb62f3d105fd34dbf2e6420f972532d78143077f9110e764380d2d5830775de"}}, {0x8b, &(0x7f00000005c0)=@string={0x8b, 0x3, "38a1b20bb7379ccc04426619309260ebca21c740e040a4afdd1464670194e77dd43c59d40ecc664621842575bc6d5456664d20a6c5b12459e55ce266c4f1f41b7cdd477d98c16f020e248d99e2befe311ee2a96fde098e244ad6c94e5bb47b39d57e6b29edc2b494c268d322fe1e91bcd3d1a3ee0a9d27d5d5dbea2ff814a8af3a2ce599327c396925"}}, {0x5b, &(0x7f0000000680)=@string={0x5b, 0x3, "f5197b151b2cb03d3576030e1830fd39b6cd63035b55f872fa4b8931ebf8c63ba587697808949d203922dfac125447866f3978904877eddcd57d8ab76c24d05d25eaa55cdf068f4e6f46e8dcbcb01bec599956b1f3babba4bb"}}, {0xff, &(0x7f0000000700)=@string={0xff, 0x3, "1b6e32a7eb6b8c3972d17d2c646e9d8ffa5edd5bc8c18dfce054890ed7b7a62021c9cc9eed0b00c0a516c4c72363f0dc0a06c5ea94e37350b20502a5c315c2d00bd5e8c826e0aecf5670cf5319d3a95cc2c82061090eb37478ce00cfe34e2a56df9d3eef5691b228998bab8ada1755f69b466a600ee8592dea6379b60f7ce0638f715ea36c3589d6192ddd5ad648c8d4e15f43c3e29c66e04b6258ae00bb0aeb02f8fc43db37b346e4c0b0f24347ce0633cd86ea7f93f6f0f4198acf18ba0bbaee8f7c9075deea539430142d235e0f7edca12f673cf69412846345bf5e994c592dd353109d4552afe4e3015f511585cd50d0fa515ef3bf85accf53eb4a"}}, {0x99, &(0x7f0000000800)=@string={0x99, 0x3, "a5f19d7e1330e1e5a443d1d0fa3085a46f7696aef6faa3af7135ea1c5817da153863883070072b18c0c9d87a0a5e42e02cd085109896ccfcbc924689b0e6f595eca0f95e37f567d553152bdc3b28abd7c98c18053640811c159e33741345fd8a3bdc51d90220c1eabc4ed2a466569f35581ddee28f33653350c34757df5abc0fccd9ca4cd809216ecba41e66ec9044ca900545204171e2"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x827}}, {0x84, &(0x7f0000000900)=@string={0x84, 0x3, "9dcc981948e9868611147c08e617ec51c6e9f15e5714fbc37d821ff5516b5ca0168b841b9e76a05fd32319f46391d4084944f7ca4b5d567c82f3c9c1e6c7e2a0dabfc02410c838008e006d953474368925e7fcc0d872374817603bc97696d87862c514cd740eec36e905caee58fff7750a5bbf01826f86d9589e8f5b01e5284bdf15"}}]})
syz_usb_control_io$printer(r3, 0xffffffffffffffff, &(0x7f0000000c80)={0x34, &(0x7f0000000a40)={0x0, 0x12, 0x16, "b87f18f4954762317782133d52bb2b6d789c5c4a2bd8"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000b00)={0x20, 0x0, 0xf7, {0xf5, "7dab81431a0a7177839270b253994202a112a33f5c6796a51267ff001673cb26894b87776802f70be9e34fd87bf817e6ab48bb64c2d5b66daec029bc267071683329bd9b1ab3592c26cf10c753797b12184a548fb66affd6a6ccbc625487e0f7cb323cf78a90b640831180ae866e085c374a4807a30b779a6c75cc6104d98a3295d4c7204667edb12d532176835adcc9118abaa842e49ea25c8bf0149a583c01289f1f772f8668c233731e56f8f909a383987dcaa5fe4c45a7c4640305c0b81e85f913ed87f29bd19eebd503b7ee85c2ed6b7fc2ca7a4752f5943882f2868f0af11522983f75ac46e252709c631a53e65de8fec753"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0x9}})
r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000340)="81dd8f")
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d202"], 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="00df44100c76")
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
r5 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0)
syz_usb_disconnect(r5)
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}})
syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d070000000000010902240001000020000904010302030002000921000040132218000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x3f, 0xa7, 0x40, 0x50ff, 0x2657, 0x5604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1d, 0x7, 0x80, 0x81, "", [{{0x9, 0x4, 0x5b, 0x2, 0x0, 0x2, 0xc, 0x7, 0xb}}]}}]}}, 0x0) (async)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x3f, 0xa7, 0x40, 0x50ff, 0x2657, 0x5604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1d, 0x7, 0x80, 0x81, "", [{{0x9, 0x4, 0x5b, 0x2, 0x0, 0x2, 0xc, 0x7, 0xb}}]}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x5, &(0x7f0000000080)="40002048d6")
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x3e, 0xf6, 0x35, 0x40, 0x4bb, 0x951, 0x6549, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xbe, 0x0, 0x20, 0x9, "", [{{0x9, 0x4, 0xf2, 0x8, 0x1, 0x88, 0xfc, 0x7f, 0x7, [], [{{0x9, 0x5, 0x9, 0x2, 0x20, 0x5, 0x8, 0xfa}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4) (async)
syz_usb_disconnect(r4)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x66, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x73}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x81, 0x35, 0x81}, {0x6, 0x24, 0x1a, 0xce, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xb, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x34, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x3, 0x5}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x30, 0x78, {0x78, 0x11, "8669697016efae37c5ea09fa300399c235deb5956f8f4e034eaed0dede08b8539b60aa088c26d8a3d34f2bd6ddcd04f2f44bc3a762f65a9eed9d4e7ae5aef1371423c120ffdc055d67a425d294c53cb92e02f91d9b116b37cd4d02ffddb65b55a133f349c76b92566ceb20713fe8f9916c89c351239b"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x17, 0xbb, "720418a8c277a7159e4ed5a574f9a27f3d9b72a87f84129ae708cd507a10202f0076d68e7ebab9e67c84483837761954b545694fe5b213038d265e8ee5da53aa9cffe500b961e0783d332e380297706dde5a35bf40f9f18f4759eceb982dbdb336e510b122ba7955f9193e10598946bd1fbf3dac4ed30f76d0453eff0ad227e917ede14cc9ceca41b5132f88ff834c6109a36435c11eaa53d618bab30a2335b434d5a2310c124b6cfb76a621dc4b2cd5263629fe7cded850988102"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}}) (async)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x30, 0x78, {0x78, 0x11, "8669697016efae37c5ea09fa300399c235deb5956f8f4e034eaed0dede08b8539b60aa088c26d8a3d34f2bd6ddcd04f2f44bc3a762f65a9eed9d4e7ae5aef1371423c120ffdc055d67a425d294c53cb92e02f91d9b116b37cd4d02ffddb65b55a133f349c76b92566ceb20713fe8f9916c89c351239b"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x20, 0x17, 0xbb, "720418a8c277a7159e4ed5a574f9a27f3d9b72a87f84129ae708cd507a10202f0076d68e7ebab9e67c84483837761954b545694fe5b213038d265e8ee5da53aa9cffe500b961e0783d332e380297706dde5a35bf40f9f18f4759eceb982dbdb336e510b122ba7955f9193e10598946bd1fbf3dac4ed30f76d0453eff0ad227e917ede14cc9ceca41b5132f88ff834c6109a36435c11eaa53d618bab30a2335b434d5a2310c124b6cfb76a621dc4b2cd5263629fe7cded850988102"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x0, 0x0, 0x6, "021c58906fbd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x0, 0x0, 0x6, "021c58906fbd"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0) (async)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000009c0)={0x40, 0x9, 0x90, {0x90, 0x11, "1fac6bfb287454278b389ce356d37383c6ec1c2016397ad3b9d1a76e8b519cd8d5da667f1083c277166639a7b7bd877dc4bd1d7fd0e3ea77cdd6a0477c00c64281484d0173345951f6a5e96e87d35e01a1712a8bef0519645f6f2109ecb3c9dfe8e87497a17ca8bf90dc378a108fb944fe2e9df75d8ab2ea87ffd153141463ec07c762b2d573cb9a734a31757721"}}, &(0x7f0000000180)={0x0, 0x3, 0xba, @string={0xba, 0x3, "c8962143a01a905de61e8782e84acb882b1f37fd32c9004a497e2539f4c57f99c7a792e58334fce2f7998c75868a58c049dce8b61947ee56ff9e6612e208c49d9b1c979d6889afcc2b1daa0225d80a8924c1a3347319a9c935b340dc0fa25b799c427e469a6cdfdcf93fb4af3370db54ab697d1dec9d6b10f1a75fc5f17a31af1af8cee670980f7f9efefdbabe000d2f2888e3b91acacb2a00bc9a57ea7b4197f09778d3a32ea50a7f233a47f24eb0fdf4b9f2a089b7bca5"}}}, &(0x7f0000000540)={0x44, &(0x7f00000008c0)={0x40, 0x0, 0x61, "566570971ed2a6fe035129af7ebeb3b71be3984aa5c0bd62f4ee03c82a76036cd51fbb47902bfeb98995cd6aea2ea7230138c19aac65fd3cc49874d374fe836a36c079a2788cdc488f5a8d7f2ed4d806f84ac991a06ffcc99e6ceba9b6ce55fd1c"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'F'}, &(0x7f0000000440)={0x20, 0x82, 0x1, "8e"}, &(0x7f0000000480)={0x20, 0x83, 0x2, 'P%'}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "c48b7f"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "62f7fb"}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800f3ff00050080050945811302020000000904010000020d00000904010102020d00000905820200f6f10000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7f, &(0x7f0000000880)=@string={0x7f, 0x3, "3f10515202b1b0f10b09480ae79121bd74f10108ba026aa74eb8c93d589b95528977c28c3344eb08549bec60d334702a5605fac2cde0735df84b1909d5c82de3de12cac3177dea868543e6078bb2feb4b46f159477aa5a1232d0a67839fea96c9dec8108710f89f124b3c237cd766b37671397750b28a2fa5f431afe2c"}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="2011ea000000f17ff4a9181a194e791101c404051feb8123a0e9266a0c73c2eafc526afde2ce43b9e3e5f7cd7b10c6e57c46458b5fed6e929a72f9eebc91ac634fe09e85df925efea11b00000f1fd9f5ecaa1130ea30048455080fa646956c27785188a91605029692f133edf659c8ff71ba631fa66c3da202a7008de00b7b335d42994862dd7bb8dad3155e6956033913611ddbf9e38f6f383cd394db32b066606cd9b05912dafb774678d160d3d0c8e6743aae11739bc2255d34ef32e26c0af732a8b2e70a5a0b19ca0efd4ce8b45cf71f3577491ae08075072fc5d20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xdc, 0x7f9a8da25af635d, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0x8, 0x20, 0xb7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x7, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x8, 0x59, {0x8, 0x25, 0x1, 0x80, 0x30, 0x2, 0x50f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x66bdf444f7d8ee41, 0x9, 0x5, 0x8, {0x8, 0x25, 0x1, 0x3, 0x0, 0x2, 0x9}}}}}}}}]}}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000082505a8a440000102030109021b0001010080fe0904005b02070102ff0905010208007f81090ba9ee2b9c2d"], &(0x7f00000007c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x9, 0x4, 0x68, 0xff, 0x92}, 0x11, &(0x7f00000005c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x8, 0xf000, 0x7c}]}, 0x4, [{0x74, &(0x7f00000000c0)=@string={0x74, 0x3, "83c4eb2e0a89307891391590bf1319e61cc590a824d4e7974a4f72b18d6efdf5adccd700b4558a2d247bf3ca79848f2cad6eb1011c8e058fb42dc3f3909f165fced2f5d5a27c8f45cf293944a5162fda4a4a086c9f543f16d995c87fa11c452535eb71539656ff62e6bdefbaaac87782247a"}}, {0x0, 0x0}, {0x6e, &(0x7f00000009c0)=@string={0x6e, 0x3, "e194e7b25fdfad73983b6dee3303ce73fbade97232bb80d56e458ba2dc74f74d53afe15d8753629798e5e2502cd2ebeac49b6fd76fc5560d1da9954d8c4f2c221b9fc4bd83f2f30eb6ac9734682a7361ce745a5f3195285d6a9929a1b32a89fc6446d82321f9d938afc10aff"}}, {0x2, &(0x7f0000000900)=@string={0x2}}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f0009"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x4b, 0x0, 0x0)
syz_usb_connect(0x5, 0x63, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0x50, 0x27, 0xa0, 0x40, 0x5c6, 0x9235, 0x32ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x4, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0xae, 0x7, 0x0, 0x61, 0x31, 0x65, 0x1}}, {{0x9, 0x4, 0x4e, 0x39, 0x0, 0xc1, 0x9c, 0x84, 0x7}}, {{0x9, 0x4, 0x61, 0x1, 0x3, 0xff, 0xfd, 0xff, 0x2, [@uac_as], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0xb, 0xf7, 0x7, [@generic={0x9, 0x4, "f8369a555a83d1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xa, 0x5}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xee, 0x9, 0x7}}]}}, {{0x9, 0x4, 0x44, 0x5, 0x0, 0x53, 0x82, 0x37, 0x8}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffd77, &(0x7f0000000540)=ANY=[])
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x61, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xefb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0x21, 0x5e}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x6, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x3, 0xe0, 0x9, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x89}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x15, 0x10}, [@multiply_unit={0xb, 0x24, 0xd, 0x4, 0x8, 0xd1, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe6, 0x7, 0x9, {0xa, 0x25, 0x25, 0x8, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x0, 0x5, {0xa, 0x25, 0x25, 0x401, 0xf8, 0x3}}}}}}}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x82, 0xff, 0xf, 0x20, 0xfe9, 0xdb78, 0xbf5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4, 0x0, 0x8, "", [{{0x9, 0x4, 0x7c, 0xf1, 0x0, 0xd2, 0x89, 0xe8, 0xe}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x20, 0x21, 0x9, {0x9, 0x2b, "9f3bd6b4b3547d"}}, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0)
syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000300)='\x00')
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f0000000240)={0x20, 0x3, 0x23, {0x23, 0x2, "131f68096fa0780f8464b4473807665f424cbffc088bd85aba477a444158001624"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x8000)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000004400)=[0xfa, 0x1e8])
syz_usb_connect(0x3, 0x2d, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xda, 0xff, 0xa5, 0x20, 0x413c, 0x81cf, 0xd409, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf, 0x9, 0x8, 0x2, "", [{{0x9, 0x4, 0x4e, 0x4d, 0x0, 0x72, 0x27, 0xe4, 0xe2}}, {{0x9, 0x4, 0x2, 0x4, 0x0, 0xff, 0x0, 0x40, 0x6}}]}}]}}, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902010000"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRESOCT=0x0], 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_ep_read(r4, 0x2, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0x10, &(0x7f0000000080)="00000000b4ffffffffffffff34047000")
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000400)={0x2, 0x100})
executing program 4:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231346e53f070c0000002a890283449238"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x80, {0x80, 0x31, "1eec03a41112cc4c33f24ea19aa08f373f4329d0d3278a4e58f90ee185ab8c019affcd66e7c1eb6b1c2fe9d75a60e4c205dd43ffd7648b803516c8d466626d8d405231d3ef39ab6fc181497cf0cac373e5d84e31829ce1f7771c7d3053e5d10dfd7e9370e5ccf227a759100f6a9afd4dbeefb3eea60025f3d121d18b015c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000580)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x9, "510214c5"}, @main=@item_012={0x2, 0x0, 0x9, "2ebf"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xa3}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x26, "7a8e292973090293d3668ef00c52aa205eb5174ff68b8669d846a6fc43e37f24f4efb901fb29"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000400)={0x20, 0x1, 0xa9, "39824b32574d8c794c21b2c0490f40654f5a96c6fc49ecd0d8b95d5f6fad6d04e1c88463b2484b1706071c811582c5e661391072367eb3e611f43a5f4b8801b25832ba1aab25b09c171d2f993bfe45a2a1402740b8a957c7956802f210b78b8ed324259fff769d99b6330351723a25bb33c2c15c9734f2a771f5acd7a34351203fe8576f3999cd49871d7101c9a958aa0ff2f4d1d9e752e97b45ab2aaee9276f0e0b22f7534d644624"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}})
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x400)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000240)={0x0, 0x23, 0x1004, 0x49, "aa6a68023bdd614c49c92c18ec3b3fea0af894a2a4f16622d6da72cfd3aa8cae"})
r4 = syz_usb_connect$hid(0x6, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32=r3], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324030705840200020003240479"], 0x0)
syz_usb_disconnect(r0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000005c0)={0xf5, "c7e4948d20a75ffedd83793150df3508e0a28edc73bf545f0a6987ae5c9ce241092120f2f6fc81c3dec0ee8620e083ca2792834e5014832d5daa7e8b8fcb5829"})
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000a40)={0x40, 0xe, 0xd, "b123c758e034032aa336afcbc9"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x48, 0x4f3, 0x755, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xd0, 0x10, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x3cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xec, 0x80, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x29, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x8, 0x3, 0xd, 0x40, 0x91}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x5, &(0x7f00000002c0)=@string={0x5, 0x3, "96c7b4"}}, {0x59, &(0x7f0000000d40)=@string={0x59, 0x3, "02b733429b65602c0d04805dc338ea25ef64aa65311348a3561bbdfe649d1d185da08269ae48999b333d231fcb44aa66cc643b58705e4e9ad7313a150498f0e10133ceea327db939e4d72666209bca8b33036089917998"}}, {0x61, &(0x7f0000000dc0)=@string={0x61, 0x3, "862b66ad06377089887469acec85fad623ce296e8ee0dc379e2c14e1f24feac61e33d5894481f53a1c0b8fd57fc4823973f2c1cb3e0c69e0b39b8993417e4aa1e03e571a0055496ab7739207e3585b6d895875cabb38cb2776e8af00ded696"}}]})
syz_usb_connect$cdc_ncm(0x2, 0xd7, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a44000010203010902c500020180903b0904000001020d0000052406000105240007000d240f010200000006000b004106241a0500286924134078e8732b4ffba0c8fb977cfc24311df8afe5d3a015eb4be222588770c141409f246bd2a8696810c60ed62c309959f14abe0e4a155179efb418fa4e04b422e09d80e98b9c1dbdfdb21e70f3ab41217deb566d5bd9d20784bd9e08d1bab7b68118929f04"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f05106605480200030109021200010495708109040081"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x3, "2660a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x6, "56f1b39b85be"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000340)={0x40, 0x3, 0xce, {0xce, 0x6, "3653f308bde11c5048a0a5fec299fcf58662dd8d99949e948cedf584e5bc7a253fdb5cecb00e0812229b4bcd23076b4f50b35d7b414a6c5fa48a663ae1c3bb003c4bcabf685f9d4fa75fec8b7bbc59971ff86bb3ca76a1b76572b46d17b32394038ea9604b2535586f9f487af59676d30d8ec21179b18ae262a19a29c7872cdd4afdf71b52c7110c15169c7be833f39c5c16cb0073419021defbf3a062ca691e5343f48ed8be7034c81285733bb531ae8f8d33cf32c8ef9e448c89f31b2344056312de621f122a5f475b02d7"}}, &(0x7f0000000440)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "12db8c640088baf25d013f1ec0565bf9693da74f5d070bd1239982a1e2e9aa58c26395d320f3e42138bad9a63bda8cc76349d770e7066124178b4fb6c3c106d66f12d4f9ce0974d0642f1fe6b6fb3996dc28ed8ffd91a8125478a4628bb0ef50a6b2894e49f0cb208c88d1bb25c96beb22662eed1e1712e1134e61678c86171f0ddb67745f57e5c6745e8f2e8e82697e3c5cb474a697a067d09d8d771ad7c4a045da7aa913b9751e10fe25dfd14824e95a78d3be182915aaafb20552a31e030873fb9db74ab02dc4fc2552fa211b35e067330d88"}}, &(0x7f00000005c0)={0x0, 0xf, 0x6e, {0x5, 0xf, 0x6e, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xff, 0x4}, @generic={0x48, 0x10, 0x1, "ae42f5968973a1c4d43e989e6af78a29e5a6e28afca2c15e8c3f6970d97b499d601723e6bdf197a93d9c171454b2e95b9f399bef1dc9f652721e77dd6ff63dfe3a8aede224"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x9, 0x197}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x9, 0x1}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1, 0x3, 0x4, "9382e8fb", "16994891"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0x2, 0x3, 0x9, 0x4, 0x7}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x53, "d746d5b91e2b77cda011ea94c90ea45a4fd23363fc5599588cb087a00f53b83a2d4c1afe842956db3471005b842d686cf3591150c3ee42cc177afc8306b3d0aea4a53436351817293da0fe64d8da203f93818f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x80, 0x8d, [0x0]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "894c"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="2c8bb1be7180"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "e230"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x9c}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x3}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x340, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xe1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x8, 0x8a}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf8, 0x5, 0x1, 0x8, 0x8b}, 0x20, &(0x7f0000000400)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x15, 0x1e, 0x2, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x7, 0x9f}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0x3, 0x6, 0xc8f}]}, 0x1, [{0x66, &(0x7f00000004c0)=@string={0x66, 0x3, "16392500efcbad2c661e1c9bc970fb5c4aafbc97509fb316795af444145ed791a1a835e8d977064d02a94847a6fe10cf059a79e46ac25fa4ee44fb9df77f5dbd6b9042fb1f66786a72a5adbd90f51343f5b1beac21ba8e2eda712468c5d5136cd6fd7e5a"}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x20, 0x0, 0xe2, {0xe2, 0x30, "4f801109967fd80be4c9808004caaad0dc6b245dcc7ced230ccd867ed5c29cf5522fb1355f3251240a718f875f8429ea78ac1bca9a5a36d4083b6c2918e1166be46e9f23f22a8481682ef1fd9ad694ce662c1e2b432b1f01ebf713e02b768b28c0e31ccb595368328324f6e1e7eef8561cdfdc51ea043b98c2bac6b6b723599ddaac1010db1ceef991ea0d870de36476e20f4871589ff8c39158fc4fc410ab441594b46018dfe91a50d331bd678511763a498003bbed285839d014f3a5e4bc5b63b230edd407c683a72f1611fb793535b66a3b9a1e584bfdb2d71b15d8690237"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c00)={0x40, 0x31, 0xda, "5e70195927381260b4b0afb48405a5e89defd788a60db842ddbc76e053c9deb4ba98e08886d4560d8b2c74dfcdfa598e5acf8426f5eac99e1be968b045ba4bdfcd327e17d12b3df750c041999512badae297972d31c53e9a884ddb6a2ca8a975b647a7741740d70ed6690e6cb351191f0ace7b9b990a988a82d8f88d1a296b0c07460e1ee29d6a233937dda8cd5699a3296de1f9d715ada63fdcf5b2be32f94411ff452aae796fe42f982cdab1ce6ea1c4daa9c150650e3864d99e790da56c128f2ac73c264f0cb1910e77cc049362339502938824492922c5a4"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d80)={0x20, 0x81, 0x1, "db"}, &(0x7f0000000dc0)={0x20, 0x82, 0x2, "d652"}, &(0x7f0000000e00)={0x20, 0x83, 0x1, "c8"}, &(0x7f0000000e40)={0x20, 0x84, 0x4, "f405cca8"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, 'yT<'}})
syz_usb_control_io$hid(r1, &(0x7f0000000780)={0x24, &(0x7f0000000280)={0x60, 0x31, 0xfb, {0xfb, 0x4, "3a12f42befaf46da2a43b72f117efa6a975893bb36b0b69d95cc0afc6f21ddde9ba769475ca91d9260528c09b1ed901cad2e74a5bbfbab6db271a1566235970c3e6ccf300b2566faab07f6aaeaec9938cdbdd63e3e297e0647f5eb8ce8082e91793977b1d19fda037169d72a6e42153c1ec7c9be06573b042d3ef5bc19ecdbe9fab151905b1611c41de45adbf4df44fe2379571b18273d56e5c20f7e7c8c575d7cef172cc04e89df925e6108f0d3b5953adaac5e5b0f9d9391da56eb96773f086d05f4da357b4d61a18903a684ceddd30035c5dc51b8946b4394f5f2ed80e832411f2cf2ae666f1369f674c03c20205367034ced1e91fbe984"}}, &(0x7f00000005c0)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000700)={0x0, 0x22, 0x2e, {[@local=@item_4={0x3, 0x2, 0x3, "beb31414"}, @global=@item_4={0x3, 0x1, 0x1, "fc901c7a"}, @main=@item_4={0x3, 0x0, 0x9, "73dfcca2"}, @main=@item_4={0x3, 0x0, 0xc, "4b9af872"}, @main=@item_4={0x3, 0x0, 0xc, "0d479a4a"}, @main=@item_4={0x3, 0x0, 0xc, "bddb207d"}, @main=@item_4={0x3, 0x0, 0x0, "106a71e9"}, @local, @global=@item_4={0x3, 0x1, 0x0, "1421be2c"}, @local=@item_4={0x3, 0x2, 0x8, "5a1ffca6"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6e, 0x5, 0x1, {0x22, 0x306}}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x40, 0xf, 0xb2, "dae7c018812fed2c2eb8a7d78cf2f6045fbdc32ea25fd81cbcb58194d6a46eb71eddb16a7a4f258874c0308c417f64989903ec7736e741bfd438dcb49765f2c703d7025ace47bf3a3b9931b5f3d3ad4f7ccd9f5a13c3675a97d3abd4946f52632e5b024e20da88fc18d46ef95afcc4133410f674b181aea46de604f70b2c43cf159faa8b83cd782096401c9ae15d31a57dce281300d25b885fdac497600e2d3c038a344b7fef906bc7eb202f38e7b3b116b8"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000900)={0x20, 0x1, 0xea, "77b2c77108dcb9d5d72b4e7326e1813af4ded7916bac26d858d8e9620059a0e48dd8971be6959bcac66ad4448f68b4569a36c21125e53e5c464ca2a9d8904aeb9c537ed14253a4283b9fb08a3648d7703ff8249f6041d3f4bed61c4cd50d1adc149fef3e2c69f12d55090b045a2996185b6e721fa1b482af6fdfc7a0b1afb6b1c99f71634b0f014e5781bb74db789e8326e6c126098ea647d6ecc02900ef3cc027bdd6c66572a8de9d022a49fb56a1a22c8fa7c1f96ed7975b053ae9ec89be9e906931a298a98d287aca4365bc94395eb9839209500cb782f634212b2a4b7f2350f79dec57e112131b0c"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)={0x40, 0x41, 0x82, "eecedf54273686b3028a2a049d11311c9873238b1a12707f1d0d060000009b6b67f7ff28366da0089edf98526792a7435f73ced4f3416bee2358e2d08fd17771eb13ec66a515bb2693b8372a379ada5dcec64ef4cc536d9bba2c843bfeeb075e64d5c84ea939e396f74ea0cdfdf17210cde08f8823bc37922279d9dbb831053063de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffde6}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "1800", {0x1, 0x7f, 0x9, 0xfc, 0x8}})
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "1067a27c", {0x3, 0x100, 0x0, 0x7, 0x3ff, 0x9, 0x5}})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"])
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200a030000004adf8516bd9910e91aab612bf3a0"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x39c, &(0x7f00000002c0)={[{0xd5, 0x4e00, "b3fb7581a76bff1a341cf7ac0012199c7aa29e9452c52bfbed17fc93866ed68fc0996655132fb9f382755b1bddfc7859af33bfd77510cb6e14d19c1fa657de16aa607e541d12278a969ab84505fe342a04e4bd4b3d701cf7b34786c9d88862f7423bc454e5d307000000e6be76c4e40de4a2846833652fbd9900345e9b27bde6bc89fc0f4e5b7f4b60fd40d533773b92d45cd5258f6fb4231fa15568a2f31fa6420a1911c8b1a6494b92919c9fc9dbb883dfe80037ee076708f27ba6b026343738da890ac2cf495ed63144be5b91c175fe08631aa3"}, {0x72, 0x4e00, "ff402a8ba55120dc08965b1ab3eb6020484a48c05b52942a06b2a4d69a90f9a25da90c8746f7c14ffba01b492436d2f8aab46045910b615d576a3b346033ff56881e0c1800abe7aa8e8d4a58b97d8ceacb05591b1ff65627aea45ff2c13d7e14612d5bcefeffe500a8568e8252e7d2bfaf98"}, {0x1cf, 0x4e00, "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"/463}, {0x70, 0x4e00, "9507e44f239b2c4f36326db7026b5fef863ca01909d64756e9c437e6e82f29df21dd5864dbed1c191a8ef86912e74ef5c87f46360389b3fb454222eb145592c2e5e43e360ecbfb3254f03fb956a799c6b248b021f965911c04f65b6cb199058afc89d363afebfdadb1130d567aa3e31b"}]})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000013c0)={[{}]})
executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x3, 0x52, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0xf7, 0xa2, 0x85, 0x10, 0x19d2, 0x178, 0x1dea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0x6d, 0x5d, 0x2, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x3, 0x1, 0xc}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x81, "dc5e82fe"}]}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe6b}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00N\x00\x00\x00N'])
syz_usb_connect$uac1(0x7, 0x71, 0x0, 0x0)
syz_usb_connect(0x5, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xf1, 0x60, 0x91, 0xff, 0x54c, 0x38, 0xea99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xdd, 0x3, 0x0, 0xcf, 0xa7, 0x77, 0x80, [@generic={0x0, 0x30, "9b127fe465124b05f05b4d60ae7bfabdb3880ea43954d148f2e3fa8e6745dbacc24e01eb1e1675a2e1a7c906119ab2995ddfba5a838a4497cad5183638ff4184a923ae54e4618a07bda6fe175e66dbe49e63f25ef5dcea7b966a69caf4d21eedd324f7571d75b17e6c810bbe9fc9baf66f1be3d46f08bdcbe24819baa93c9dee5119ce12286e6b0fa0837d20d578fa8350235cc9694a0bc85d2f997bfde8492f09a58f0a70a5909eb3c19129fac5a31b672f56bcdf162e30f8"}], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0x9, 0xff, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x7, 0x7}, @uac_iso={0x0, 0x25, 0x1, 0x8, 0x81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x6b, 0x8, 0x7, [@generic={0x0, 0x1b, "d51998c2417fcf58610aaf328e0db822cbd414a5569d6a6171de83945ee3497d53ed61e56507b7b297ecf4b6d5a11e8676adafc317d92e0af1e54e55fe0587764dcb9b894ea45ed77cca7e14c0689a050be3846bc0914144c5863f8d051978ae665613fea763f45e562cdb1f48e8ca3db8b911acb5ece54985a339c0fe2b23cbaef5cc1073"}, @uac_iso={0x0, 0x25, 0x1, 0x8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x5, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x1, 0x10627b5ce6a3df82, 0x5, 0x9, 0x8}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0xa, 0x1, 0x6, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x9, 0x70a0}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0x8, 0x1, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0x1, 0x4}, @generic={0x0, 0xd, "40de50f89e6a15776280028bc4f625d5a6f2b152294fb98f1e05d5cbbd059542b709affd378571edd7c5b6e0d528bab605e6f8d0821c00002251cc24ee9000b6d7e2d93374d56859a3c38518cf4d959b12cfe00aa966230fa1384b7bbf83248d1a9684c939167f0534ae01904d2354a7f62530e38f2be26f6e7d39"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x92, 0xf, 0x1, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0xfe, 0x6}]}}]}}, {{0x9, 0x4, 0x61, 0xe0, 0x0, 0x4a, 0x90, 0x51, 0x10, [@cdc_ecm={{}, {0x0, 0x24, 0x0, 0x203}, {0x0, 0x24, 0xf, 0x1, 0x5, 0x5, 0x5, 0x2}, [@obex={0x0, 0x24, 0x15, 0x18}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x7f, 0x3, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x4, 0x199}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0x3, 0x38, [@generic={0x0, 0x31, "6961bdb9e80a6bc96aa0c669469bbc947cf952ccc17fa97fc538be59d4dddb9765df0db3034221a465f09b8fe5b97027f84cf2f72bcc64194af9595464ab883a832aea8864a7e9c00b490ac937b46056c7f374b755241aa8c5a853d6d3d707d8e12aa0f273a0ce65182c6aa4644d6bbec60b6b1e93f2fffb75196c3db75a9df1fa2f3bb845e321bc117f0da6b02599a0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xfb, 0x4, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x40, 0x0, 0x9, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x5, 0xff7f}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x6, 0x34, 0x7f, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0xff, 0x40}, @uac_iso={0x0, 0x25, 0x1, 0xc, 0xc, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x4, 0x6, [@generic={0x0, 0x8, "34720045fd22beb4f46638b816f5a284ea1c751148e1cb5e8c629fc6f242da4c54b4617918c098a6e524d080a881864aa840617ca4afb9c1c0366978e70c754dcb707b60fe56e7dd16168c150b9e3677cddaa325a831cc066837c9b337b0f036db08080fd6423d8c32c53a93e8e94f33274798f633c9151186d699f7126a2323d29b2e7babcdd30e236406ae960a1d21efd3ade397c342853299d505a88fb85488cf13d30959ea583b0976de1ee4b46e94ac2dd94565b228671cd619c74e39155da93893cc153b050c053e2363f54a977af141ce81cdf945cc4e845441701a15710b0f6d5c74"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8c, 0x2, 0x4, [@generic={0x0, 0x31, "e75ade65003dc9c1ef1e8e92f348328cc3fe14d96ed0a29ac286d6cf02c9d6ca56cd408c5b887608e8315acbe481185065ea083f025563263fa5408a57b3fce3659b591477f12ebdf268c752f682b4412f61856f6002e1ff085dce0f319574ef294213bd00e7a59631cffc838e9761a6db8be2e7bebc263b0028c396253cb6dfeceec662b7cf708f91613ae7ca60c60d1eda201bd3c277bee0cddc1e500925a7eeaa55134f3fdeed28291c1211528df9879d1cf9a2d05199e3745accb9ca3a56e1dcc75d3d9a048015ab051889af8302eedaa4d838a65feb663e954a9563dd2574faa23587d5b3eb484e9eb72c31e0683f3cd0c8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x5, 0x0, [@uac_iso={0x0, 0x25, 0x1, 0x8, 0x0, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0x6, 0xc}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x2c, 0x7, 0x7, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0xda, 0x2}]}}]}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x155556cc})
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f00"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a112171095102a15f4f7010203010902240001000000000904fb00026c5d6500090505820240ff2919c2b990fdb6d91001fbd24890529e3f38ca04bc6cda135bbfc5c9d965ef58480da4dfab56f58bc5df4dfcec13849d6b04ee83f6cca78626758e4a0731e07f9e99538a"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="200801e15fb19ff324e94674b6c097d6fd45628b93d14c75925213155e684bdad0d9ee798169461e7c25a37378983153c6aa39e09bef79455b254d5cff13435de8c5e12b3c2a3732cc6ad98f0c2c73416b74d2fcdb2653e75f19d48c22cc26a0b429087f17ba0da6515690537f526966e352f86a349eb60f927cd368b4d4cc7d7bfa9dd4bf6d30a898dc047f2ab00c7e7ca6a4372379443dec515f06b9d705fcde379d331810140bfdb5236a8d897d07dcdf3b1baf628d62c49e00c97cb8ceaf3b2b36da6702f502a49f61a3e8e619df4632b40e14dd6d4f9a8b9c660ffa3788d3de3eb2c4454dcc32dfb0fabecee29affe8baf5ce05"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xb, 0x7, 0xa, 0x7, 0x2, 0xc00, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1846, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x60}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12013f00000000407f04ffff00001622fcab00000001090224000100000000090400001503000000092140000001220f000905c5e277b4ee7417c1089dfe0c8ad622d140ec56848018e14268753c59ba75fbbe1271af5abbc2325f0da81aee400fadf5c62203426a658ce695bea7a2b037ad30cc79d4b26868582324a8df06d191f93123e0a6e64b5cc533db973f30d15b2c6d90edea4d630766714ab9cf7ebd", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000140)={0x2, 0x200, 0x4, 0x0, 0x104d1f2f, 0xfd, 0x81, 0x1, 0x8, 0x7, 0x79, 0x5, 0x8, 0x5e})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0)
syz_usb_disconnect(r3)
r4 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x107020)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x543, 0xe621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xa, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x81, 0x1, "f6"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "9b"}, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000003670b91e2c907a342931710af71de8334858013bca66bb57f8d847ee2a9aa661652fa"], &(0x7f0000000340)={0x20, 0x84, 0x3, "9d957a"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "c338a0"}})
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x23, 0xf8, {0xf8, 0x22, "06467cf553b9685b3ba2d0e74d1ee5efbaa39194dad1752a23aecb9481abac75f5495b3ea5fb5dbd54bae41a1fcfe99faaa086b86fee638417dce65bdfdf406cfa47b4f55d15cbe1c833ba960fe56f0652a9c7feab970b89f036067a0db8d10e3e08425f0cb61eed989d61b4139c0a7a3a695bf8d519b5da6e8531a6c9cbfd4b77aefb679096452360a2fca97e5ef05956a8302f6377c8f1d66d9ee75c6b32cb5f3525299206a6dcd19bd1775bc3280f666baf322d47a0e5a5980b7618351d43cfb5001e09e6f0501a0738b8a3f025dbb14830512d02c29a21825bea5795dec79ec332ee6d9da7c03a724f9f2184d76a52c0de7cbb90"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x40, 0x16, 0x7f, "7119847c120ab14912f98a1200a78a80ecb4ece55afa758ce48768aa4b05aadcfc053b262e1b353a2adf7ba96668ad5b34646804d408b2219058bb436a957c403367b25813b32bb7c73ad66ed6bcff610cca21a26f652d2843930d17d0796e5c524e7bd60c773133546a89f22d070d159d89737926ad995557d46b69b6b90b"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x7e44, 0x2, 0x3, 0xab1, 0x3, 0x2, 0x6, 0x6, 0x1, 0x4, 0xb, 0x1400}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x8000}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000840)={0x20, 0x89, 0x2}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000206a05c600000000000001090224000100003070fbffffffffffffff010009210500050122280009058103ff030481"], 0x0)
syz_usb_connect$uac2(0x4, 0xc7, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xbb, 0x20, 0xc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x9, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x5, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x5, 0x1, 0x0, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x6, "25a75e", "b6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x56, 0x0, 0x4, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, "8f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x9, 0x80, {0x8, 0x25, 0x1, 0x0, 0xc, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x2, 0x87, "d70adf43ce7b6b090c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x3, 0x52, 0x6, "06", "88e5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xd2, 0x89, {0x8, 0x25, 0x1, 0x81, 0x3, 0xe4, 0x1}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0xf9, 0x9, 0x40, 0x72}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0xf5, &(0x7f0000000440)=@string={0xf5, 0x3, "abc217e49d61109098dd71da42ba2fb390aeed8338f5334ccd983ae24be910f6ca15197bb0330d685b3de998f3bfdfbb5e8ad6bdf384f0927a773e3c9673d9f702e8bb34632ba1cdbf152287eecf900c76688235b392a4bbc2e58d1f37df122fe8c282a6a090d4125230a0eb3e8b290332f7e506ca19729df5d95639153abaaf983b7c84bf7b9d9377db499389e0036db1a6d33deaef7683ee319b3bae2e92770637935bbf620c66501690becc7f5561b16346e7553bbf4115470f4ba7a48b7f66069eaca71c1469bd897176cd1592dc51f12f4b7c8f207aa3cabeed7e3c7b753e7eb3c0ddd37fb02acbe4c7d3563bd6bfc25f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="2004420000004222f17d3816e9bc787a4d4cdbb3f5bc62b1d6ad5a9a56381b21a60f9dba43b59c23e92812aeb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)
executing program 4:
syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x80) (async)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x80)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x1, 0xb})
read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/84, 0x54)
syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x208002) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x208002)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x6)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/22) (async)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/22)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x40, 0xf, 0xb9, {0xb9, 0xf, "95bb891bd977c5036575e6a810dd4a4083463560b2b2957b9120dec7909522e71f315496f0e1c368f649535a4c61bc1b0fe27bc9d9d643426bf797ea3e4e2959d0578747bb930703968442486bf735349bf70b36fc8d0846b1e46f27110e73b8dfcf257dfb59d86ba1ddee053075171a84289e22af24e0dbcd2071e742a54ddc45b22cdd2a06777c21b7cd0882d3dc7ff1aa1b86b94a009c6a89c8fab13c2924681fcfefc4cceae7b2040d4c5117e35675fa55863035d6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "1cd5e5790b5d120b7af0f461b9f2c4f9ff75994c3fe5288995f3b6b43e44dd7ed526bb932ee6229a60e9775ac1f72391b4d7d32c6e5365e5e32de452cca8037246f1ff6e97b157e0777c13b4e7ca43f1b3c7d852568df2d693d169d1d38e37197158c3f2c595e05247561931a5e9fc7920a7c2a403b1af7e2e1710e191c19827240a3654081bbec3660317113fefb300e7d3128bccee1339686325d95a4bb2eccc264fe652814649986eb40ad7b0ac42453199e6f80a387dcda54002fd479f57f5421ccaf671e10948e248f02ebdd12c123199aeb64d696f1467053b4102"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x40, 0xe, 0x83, "36f12d260b0496fbc06b69506dc83a2930878a443de597a3596e52479338c9abe10d20ab35a14db84674dc6030f420a789dbd569fa074d55a309e17bde3cdb5b45937dde63f9dbd43e7890f8807c2a0094665f2d4cb9fabc6280d55ff97610547469f7ae994ca74f2957accb184880f581da3cfb14a47f82417c111f016e711deaa49b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0xff}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x2506}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "3cc049a6c9a741b7db252d0fb8f387b1dae56cf864afa846550aedb02e678b4e40f3c3c91767d32c87e2f9fb2dea45"}}) (async)
syz_usb_control_io$lan78xx(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x40, 0xf, 0xb9, {0xb9, 0xf, "95bb891bd977c5036575e6a810dd4a4083463560b2b2957b9120dec7909522e71f315496f0e1c368f649535a4c61bc1b0fe27bc9d9d643426bf797ea3e4e2959d0578747bb930703968442486bf735349bf70b36fc8d0846b1e46f27110e73b8dfcf257dfb59d86ba1ddee053075171a84289e22af24e0dbcd2071e742a54ddc45b22cdd2a06777c21b7cd0882d3dc7ff1aa1b86b94a009c6a89c8fab13c2924681fcfefc4cceae7b2040d4c5117e35675fa55863035d6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "1cd5e5790b5d120b7af0f461b9f2c4f9ff75994c3fe5288995f3b6b43e44dd7ed526bb932ee6229a60e9775ac1f72391b4d7d32c6e5365e5e32de452cca8037246f1ff6e97b157e0777c13b4e7ca43f1b3c7d852568df2d693d169d1d38e37197158c3f2c595e05247561931a5e9fc7920a7c2a403b1af7e2e1710e191c19827240a3654081bbec3660317113fefb300e7d3128bccee1339686325d95a4bb2eccc264fe652814649986eb40ad7b0ac42453199e6f80a387dcda54002fd479f57f5421ccaf671e10948e248f02ebdd12c123199aeb64d696f1467053b4102"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x40, 0xe, 0x83, "36f12d260b0496fbc06b69506dc83a2930878a443de597a3596e52479338c9abe10d20ab35a14db84674dc6030f420a789dbd569fa074d55a309e17bde3cdb5b45937dde63f9dbd43e7890f8807c2a0094665f2d4cb9fabc6280d55ff97610547469f7ae994ca74f2957accb184880f581da3cfb14a47f82417c111f016e711deaa49b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0xff}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x2506}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "3cc049a6c9a741b7db252d0fb8f387b1dae56cf864afa846550aedb02e678b4e40f3c3c91767d32c87e2f9fb2dea45"}})
read$hiddev(r0, &(0x7f0000000640)=""/76, 0x4c)
ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000006c0)={0x0, 0x7, 0x2, 0x1000})
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000700)) (async)
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000700))
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000740))
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000780)={0x8, 0x8082, 0xac2, 0x3, 0x6, 0x1})
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x189, 0x0, 0x0, 0x0, 0x48, 0x1e71, 0x2009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x81, 0x7, 0x1, {0x22, 0x68f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xc1, 0xe, 0x5}}]}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x4, 0x5, 0x2, 0x97}, 0xfc, &(0x7f0000000840)={0x5, 0xf, 0xfc, 0x2, [@generic={0x1c, 0x10, 0x4, "64a49bc690e38dc656571977fe8927f5c4e872701776acad80"}, @generic={0xdb, 0x10, 0x3, "02c6a39a68b25e48e5c90eb4f107a4a312accd85b7cfc8a79a6216bdd90108d337d3ab1a1e749de04b620fcef23ca7ddcb250e6fe55150db9f46991fc8ca736af3f5677c269be36ca6aeb548f77796983dddb1921607f5bf84a46a9459db2e8ee6ff338f1827779537e79aab66b0c5bd84dc983d48dfe0d5a3a283d890516ab9d90de51255bd8e67ea4fbb20f915793f6953fcba5f9e73a07bf599cb5fc812faa57d7ffaaf8ad08feabe27041da0a447174d096f18b6123317553a9b0fdc05a4d6bd49eec147fe2236d83846a79843eaffdf306e8b1bdc46"}]}, 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc07}}, {0x22, &(0x7f00000009c0)=@string={0x22, 0x3, "984459b17f4f3f8907bef592350dac6106272cf0b24305db35392fdd80da0783"}}, {0xac, &(0x7f0000000a00)=@string={0xac, 0x3, "f5697b037c01816b769586f26d44ff3ef0f4b499863715fb741ad51df549feb5f09ae0e32656a8dea21de18712ea5cd8676116756b371371b4f52d3d9ce0a31c8dcb482d80f3767674fc8dfa7de99c42a40ece526390c73077ccf99c22acfe54300eefec0f7f41257036f172d1170279066663c7662115272efa0ad7ad1508163915519d863556faedaf6a0c09860bc812b315d25f56b0d1d076d784c819df8f66f89448ee2bd0e557f9"}}]})
ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x200) (async)
ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x200)
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000b40)=""/240)
r4 = syz_usb_connect$cdc_ncm(0x6, 0x7f, &(0x7f0000000c40)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x1, 0x40, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "986b"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x685a, 0xfff9, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x11}, [@network_terminal={0x7, 0x24, 0xa, 0x7f, 0x4, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xff, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0xff, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf5, 0x9, 0xe}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x110, 0x5, 0x42, 0xf7, 0x10, 0x9}, 0xc, &(0x7f0000000d00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x3, 0xbc48}]}, 0x7, [{0x37, &(0x7f0000000d40)=@string={0x37, 0x3, "8ba519fba162a4bf0bbc96baa4b0f24a3b6880ab834b369a76e3b9856ef39557c7e2f30326e20c0da31e4e793af2a2e0b0c07f740f"}}, {0x47, &(0x7f0000000d80)=@string={0x47, 0x3, "89134e0399c55b41c11f28548cb89fde0a4c079f02f35328ab4ce66355730b7bee038c0b2ea7fabdaf7793d18c6c36a2e393206559e92aac97c2bc0b00ec23269c0e0c5dc9"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1009}}, {0x13, &(0x7f0000000e80)=@string={0x13, 0x3, "e4179ec953e1307786ebc27e3509ea628c"}}, {0x44, &(0x7f0000000ec0)=@string={0x44, 0x3, "a1f7d80074d8a56c6be7e060b462be40525958aac0e626425aa0e00ac02a26e6f4b22f094494163d525cfdc13a988dbe2d95e29ca0c2c2b2d442c838af98c33c4f11"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000010c0)={0x14, &(0x7f0000001000)={0x20, 0x6, 0x4a, {0x4a, 0x1, "a79bbdb326b409a0a398640464de9038e4eabac8f6b22282ac2ab672218ef6105482c3c113ed49c463db9d920b2ba7b13fd8ec5069e72345243225f3f067e2271e6adcb964caaf34"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001380)={0x44, &(0x7f0000001100)={0x40, 0xb, 0xa9, "864ac3663a08d0d00b0326d94506ae6c51d30bcbc7bcb8b9fb97193d7bac05cfb012f2546f859787ff382cb8ed86de60d396d481a67d42f62d5ecf7abc59ae3f01f1b47307b43762553d8af854a2847ad9c99a70abd819d3c6e7d83231cddcae947db3977ad4326a928ae2a7ff14888cf8ee553c853f495483b49ab36aac34f23013f8f3cbc96f81672ae116138e284cfb901f649d1f078725cdae847b366f5dbfbfc4ade6e2ce1573"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001240)={0x20, 0x80, 0x1c, {0x1, 0x7, 0x10001, 0x9, 0x0, 0xda, 0x1, 0x3f, 0x2, 0xe, 0x5, 0x8000}}, &(0x7f0000001280)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000012c0)={0x20, 0x83, 0x2}, &(0x7f0000001300)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000001340)={0x20, 0x89, 0x2, 0x1}})
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000001400)=[0x84c6, 0x5])
syz_usb_connect$uac3(0x6, 0xf7, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x9, 0xd0, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x23, 0x7}, [@extension_unit={0x19, 0x24, 0xa, 0x4, 0x5, [0x1, 0x1, 0x0, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x3, 0x7, 0x1c, 0x4, 0x2, 0x2}, @as_header={0x17, 0x24, 0x1, 0x7f, 0x10, 0x800, 0x1001, 0x2, 0x8, 0x6000, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x6, 0x9, {0xa, 0x25, 0x25, 0x4, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x1, "ac", "b00737"}, @as_header={0x17, 0x24, 0x1, 0x5, 0x0, 0x1ff, 0x4, 0xb, 0x9, 0x8, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x1, 0x3a, "154d11b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7d, 0x0, 0x0, {0xa, 0x25, 0x25, 0x9, 0x8, 0xff}}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x1, 0x40, 0x1, 0x10, 0x4}, 0x18, &(0x7f0000001580)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8c, 0x4e, 0x2}]}, 0x5, [{0x3c, &(0x7f00000015c0)=@string={0x3c, 0x3, "42f4453a53a6d1fcc3a0ba1e6b57b9843e437fd9ab69c4652b973b072954dc24e324050d6a74f89188f1858a48e3edd8746492012dff60f2e7e1"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "0a26bd030434b1e9c1f745d08e21f37f0014527eba63fa757e4ab600f0feeae50724c877602c052a3a9a4340e83a7c5f8e97b224668e86fb46d4b677712735cb634f5b57f1469de707df6eeed87fc57a9c6303688c6e40541815ac000a4fc3d31a1449458f4f9c61399ba716607dfc0a55e734214c435eb92aee08c9f00e50476bd70e1929f525e8366b70164db0c14657c467bdffb171d753b5937fcc638e176d9942ec7de32114a7701dd9a31a509b7383"}}, {0xe, &(0x7f00000016c0)=@string={0xe, 0x3, "ee60531837ccc9d77059639d"}}, {0x5b, &(0x7f0000001700)=@string={0x5b, 0x3, "f8a88f604aca18899cf46d10606dbc8ab9a98b48565cb5f9725f4838771b8e5f3f6455d5ab82fc9e0b2e3d7b26091b260e92bd9c272fd60ad9fe39e6aba35efa4330dcaa0ea73fabe61420614d5ef578bf5d58e0884d99525a"}}, {0x2f, &(0x7f0000001780)=@string={0x2f, 0x3, "859fcef9b7e973e56ef99e044551cdcd11099d8218e73e13fa37c86a264735d50e5c3a09c29124daba45a0c0e1"}}]}) (async)
r5 = syz_usb_connect$uac3(0x6, 0xf7, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x9, 0xd0, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x23, 0x7}, [@extension_unit={0x19, 0x24, 0xa, 0x4, 0x5, [0x1, 0x1, 0x0, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x3, 0x7, 0x1c, 0x4, 0x2, 0x2}, @as_header={0x17, 0x24, 0x1, 0x7f, 0x10, 0x800, 0x1001, 0x2, 0x8, 0x6000, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x6, 0x9, {0xa, 0x25, 0x25, 0x4, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x1, "ac", "b00737"}, @as_header={0x17, 0x24, 0x1, 0x5, 0x0, 0x1ff, 0x4, 0xb, 0x9, 0x8, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x1, 0x3a, "154d11b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7d, 0x0, 0x0, {0xa, 0x25, 0x25, 0x9, 0x8, 0xff}}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x1, 0x40, 0x1, 0x10, 0x4}, 0x18, &(0x7f0000001580)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8c, 0x4e, 0x2}]}, 0x5, [{0x3c, &(0x7f00000015c0)=@string={0x3c, 0x3, "42f4453a53a6d1fcc3a0ba1e6b57b9843e437fd9ab69c4652b973b072954dc24e324050d6a74f89188f1858a48e3edd8746492012dff60f2e7e1"}}, {0xb4, &(0x7f0000001600)=@string={0xb4, 0x3, "0a26bd030434b1e9c1f745d08e21f37f0014527eba63fa757e4ab600f0feeae50724c877602c052a3a9a4340e83a7c5f8e97b224668e86fb46d4b677712735cb634f5b57f1469de707df6eeed87fc57a9c6303688c6e40541815ac000a4fc3d31a1449458f4f9c61399ba716607dfc0a55e734214c435eb92aee08c9f00e50476bd70e1929f525e8366b70164db0c14657c467bdffb171d753b5937fcc638e176d9942ec7de32114a7701dd9a31a509b7383"}}, {0xe, &(0x7f00000016c0)=@string={0xe, 0x3, "ee60531837ccc9d77059639d"}}, {0x5b, &(0x7f0000001700)=@string={0x5b, 0x3, "f8a88f604aca18899cf46d10606dbc8ab9a98b48565cb5f9725f4838771b8e5f3f6455d5ab82fc9e0b2e3d7b26091b260e92bd9c272fd60ad9fe39e6aba35efa4330dcaa0ea73fabe61420614d5ef578bf5d58e0884d99525a"}}, {0x2f, &(0x7f0000001780)=@string={0x2f, 0x3, "859fcef9b7e973e56ef99e044551cdcd11099d8218e73e13fa37c86a264735d50e5c3a09c29124daba45a0c0e1"}}]})
syz_usb_control_io$uac3(r5, &(0x7f0000001980)={0x14, &(0x7f0000001840)={0x20, 0x9, 0xae, {0xae, 0x4, "c4999c3f1a72004a0e17b011864fa881fbe14bebcf82505d4244f5020c089f1a6797d699cf739106578b4260a8786300756313fb0d0ab0fbfce7ad854c5169c6b7e3e71004e0ecd1dae5941a7542136f334cabbfc82120050751d0c718093fec4e61a75cf66f7fbcd727a1fa7c59267448428b920ad2da3a2e4e831ad34076d47f64edc0567749c54365907ea374882be67ef1cd0b6e8bc24e1cbc77149d5c7315b74f76e42fc18e678b8640"}}, &(0x7f0000001900)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "3e97054a6802cf684eb43b3f805f62559299481e915a1c80426c04aa13ca5ad5c15f4b38bd1c140b207523f3e16a34f2d31e73127ba96f2f988480ab57febc99671089396ab579062b9e1ae9ca"}}}, &(0x7f0000001bc0)={0x44, &(0x7f00000019c0)={0x40, 0xb, 0x35, "f8d0637ffc96b599bcb74bff169bf68d7471f95c0d51150a1c939e2b7f72629ba0523ece255c951648487dc8b2782b0bc7bf5766aa"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001a80)={0x20, 0x81, 0x2, "f598"}, &(0x7f0000001ac0)={0x20, 0x82, 0x3, "ed8f56"}, &(0x7f0000001b00)={0x20, 0x83, 0x1, 'G'}, &(0x7f0000001b40)={0x20, 0x84, 0x4, "1c67cecd"}, &(0x7f0000001b80)={0x20, 0x85, 0x3, "0e9aa5"}})
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001cc0)={0x17, 0x7b, &(0x7f0000001c40)="403e4b517bff45612b05dd917e155f97a92ddd440fc91f95110dcb18636212e1b2dfa99bf2370c1388203f14d8a63dd73848f95b3062f79a6efc19b3764f90add9c94c9981d8512fad90bfd0111d52f2a9d9b078363cdf64f24c417664219faf8d93c89708bf8152305c903e0ef92d06d017d09f06a35d7ee53daa"})
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000001d00)=""/47) (async)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000001d00)=""/47)
syz_open_dev$evdev(&(0x7f0000001d40), 0x3, 0x290000)
syz_usb_control_io(r3, &(0x7f0000002100)={0x2c, &(0x7f0000001d80)={0x20, 0x21, 0xd0, {0xd0, 0x31, "f3ea99aad075609a092e1f263a2202c368735abb1c6579db879c56abbbf77adc70e6577ccd7906ca836c9a666804b082f6bba89511523e00ad6cc9715f000c126adad57188580be4347579a727b513c827de6aa5e8a698a16d45bb2b3b3b33fe004b96caf2bcc0798f1a40847a08c3d92a3e61a9804017c3232a3402b8e7fa6cb94f1553756fa1bc349cad56f41f21fc2ade50c0e2445b3f0959628814f79a1d9cab92a6811023bdd273ca3c6e1d1609b5e053ed1d32c067312d0d3b4fe1e5547fd31eafa471488d84de5dc75e7f"}}, &(0x7f0000001e80)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "a2d3dbe8f7fdacbdbbe57d12d58116058e6c81e84451383fed7e1468c71599ebf591e5fcb54f87b36ab318c29b6991fc4b7c4d14a1760c0b136c79c913569f4297666add70234298d4a0414ea0dd513d62072f0767109250f3b83294f8c38b664f4d31f902613805561db403c61dec491c070aae4c52c377e604fd2b8c85cc7676c4c7273041c98bc1efa47dc54053ea31653f0d4252505aa44a24109b71ff344a37200012a1f538361d4cedf83117cdb7063602b40b432cf2cad44ec8398bbe06c7830947c24abd0bde7ae757ee6cc681f670b693f08499a0d4"}}, &(0x7f0000001f80)={0x0, 0xf, 0xf1, {0x5, 0xf, 0xf1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xff0f, 0x800, [0xc0, 0x3f00]}, @generic={0xd5, 0x10, 0x4, "3887ab8686087ffeea26b1c4964d3c93059744e2189ef74ba4a6798c373707491e54fe1546334a20811cbcc259dcbb5b0dcf7cdc23e30b7f6c71d4858042c6633fc5dd58ad98c08725250c5b69b8b3382215a3f4e419134383cfefc2768aa33547f8afd712f743faa1e1fe34a45d890da9ddbbc0c01792d31f771e7647eb2462305f60efc6e4f167e6399a0f0697de1b95dfa9fc169cc4018181c97c02c43deb847e3b5ba13acdcfe3b4d9adde0a4536b020d5b48bf2d7e6b9a30efd475fd2683dbc3cf1e4c0f1420f355812ae288f1123d9"}]}}, &(0x7f0000002080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x2, 0xfb, "1e8af471", "b94daf15"}}, &(0x7f00000020c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x6, 0xe, 0x4, 0x739c, 0xc422}}}, &(0x7f0000002580)={0x84, &(0x7f0000002140)={0x40, 0x0, 0xb9, "443ba24031c61a2e77595b2bbe60eb82993e2baa96083c2b9bc8eaa0f88a5a549073f881da581dbae5535c865884cfab198a2bbade6332de4ab1f2712b84b5e9ce2c3ae0a629beb9b6ddb1c8958673f8358f073292453876fd16369f462b272f9cb44831bdc40de818ca33bd404dbd839279563d93ecd0fdf5b5e9b992887397bcb9891d646b861984c10e8702a90648fee1893db78363208977ee35d164743350f9faeca2d6741943ffea54562e148c930be4edd6bd6fec42"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000022c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x4}, 0xfffffffffffffffd, &(0x7f0000002340)={0x40, 0xb, 0x2, "1e50"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0xe}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "fe4d"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x4d}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000002540)={0x40, 0x21, 0x1}}) (async)
syz_usb_control_io(r3, &(0x7f0000002100)={0x2c, &(0x7f0000001d80)={0x20, 0x21, 0xd0, {0xd0, 0x31, "f3ea99aad075609a092e1f263a2202c368735abb1c6579db879c56abbbf77adc70e6577ccd7906ca836c9a666804b082f6bba89511523e00ad6cc9715f000c126adad57188580be4347579a727b513c827de6aa5e8a698a16d45bb2b3b3b33fe004b96caf2bcc0798f1a40847a08c3d92a3e61a9804017c3232a3402b8e7fa6cb94f1553756fa1bc349cad56f41f21fc2ade50c0e2445b3f0959628814f79a1d9cab92a6811023bdd273ca3c6e1d1609b5e053ed1d32c067312d0d3b4fe1e5547fd31eafa471488d84de5dc75e7f"}}, &(0x7f0000001e80)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "a2d3dbe8f7fdacbdbbe57d12d58116058e6c81e84451383fed7e1468c71599ebf591e5fcb54f87b36ab318c29b6991fc4b7c4d14a1760c0b136c79c913569f4297666add70234298d4a0414ea0dd513d62072f0767109250f3b83294f8c38b664f4d31f902613805561db403c61dec491c070aae4c52c377e604fd2b8c85cc7676c4c7273041c98bc1efa47dc54053ea31653f0d4252505aa44a24109b71ff344a37200012a1f538361d4cedf83117cdb7063602b40b432cf2cad44ec8398bbe06c7830947c24abd0bde7ae757ee6cc681f670b693f08499a0d4"}}, &(0x7f0000001f80)={0x0, 0xf, 0xf1, {0x5, 0xf, 0xf1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xff0f, 0x800, [0xc0, 0x3f00]}, @generic={0xd5, 0x10, 0x4, "3887ab8686087ffeea26b1c4964d3c93059744e2189ef74ba4a6798c373707491e54fe1546334a20811cbcc259dcbb5b0dcf7cdc23e30b7f6c71d4858042c6633fc5dd58ad98c08725250c5b69b8b3382215a3f4e419134383cfefc2768aa33547f8afd712f743faa1e1fe34a45d890da9ddbbc0c01792d31f771e7647eb2462305f60efc6e4f167e6399a0f0697de1b95dfa9fc169cc4018181c97c02c43deb847e3b5ba13acdcfe3b4d9adde0a4536b020d5b48bf2d7e6b9a30efd475fd2683dbc3cf1e4c0f1420f355812ae288f1123d9"}]}}, &(0x7f0000002080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x2, 0xfb, "1e8af471", "b94daf15"}}, &(0x7f00000020c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x6, 0xe, 0x4, 0x739c, 0xc422}}}, &(0x7f0000002580)={0x84, &(0x7f0000002140)={0x40, 0x0, 0xb9, "443ba24031c61a2e77595b2bbe60eb82993e2baa96083c2b9bc8eaa0f88a5a549073f881da581dbae5535c865884cfab198a2bbade6332de4ab1f2712b84b5e9ce2c3ae0a629beb9b6ddb1c8958673f8358f073292453876fd16369f462b272f9cb44831bdc40de818ca33bd404dbd839279563d93ecd0fdf5b5e9b992887397bcb9891d646b861984c10e8702a90648fee1893db78363208977ee35d164743350f9faeca2d6741943ffea54562e148c930be4edd6bd6fec42"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000022c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x4}, 0xfffffffffffffffd, &(0x7f0000002340)={0x40, 0xb, 0x2, "1e50"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0xe}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "fe4d"}, &(0x7f0000002480)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x4d}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000002540)={0x40, 0x21, 0x1}})
r6 = syz_open_dev$hiddev(&(0x7f0000002640), 0x0, 0x400)
ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000002680))
ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x5)
syz_usb_control_io$uac3(r5, &(0x7f0000002740)={0x14, &(0x7f00000026c0)={0x40, 0x1, 0x9, {0x9, 0x24, "6d690538fc9496"}}, &(0x7f0000002700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f00000029c0)={0x44, &(0x7f0000002780)={0x0, 0x1, 0x6a, "3ddb89fd6070e670b7610af60ee2d2f124f01e7226215609cab10d7049ecbefb6e249ff11b073cd6d8d46a702dcdd9b3d18b961ccb4c41de54a5dab20594b752dc4a9f1571dc7fbdf59575bb2d4381c8bc6ffc5911172780d7836290ff670f656522f76036a31ee555fd"}, &(0x7f0000002800)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000002840)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002880)={0x20, 0x81, 0x2, "c224"}, &(0x7f00000028c0)={0x20, 0x82, 0x3, "761a83"}, &(0x7f0000002900)={0x20, 0x83, 0x1, "a0"}, &(0x7f0000002940)={0x20, 0x84, 0x1, "e8"}, &(0x7f0000002980)={0x20, 0x85, 0x3, "4934e5"}})
ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000002a40)=0x1) (async)
ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000002a40)=0x1)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0xc, @string={0xc, 0x3, "acf322afd3a694bf4b82"}}, 0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000338d19e40c6050592d77e01020301090224000172061006090400e802ff34bc03090501024000ff0d030905ca"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="e2")
executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x43, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "60924fdb"}]}}, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904b1d02cff023000090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800)
write$hidraw(r0, &(0x7f0000000040)="caaf5d1130d55c3f91cc7b6093", 0xd)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/135)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000140))
r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x0)
read$hidraw(r1, &(0x7f00000001c0)=""/201, 0xc9)
r2 = syz_usb_connect$midi(0x6, 0x61, &(0x7f00000002c0)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1, 0x60, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0xce, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x3, 0x7, [{0x19, 0xc8}, {0x7, 0x7}, {0x3b, 0x9}, {0x8, 0x5e}, {0x56, 0x7}, {0x0, 0x7}, {0x2}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x4, 0x3, {0x11, 0x25, 0x1, 0xd, "b7c6959942c06a29856314d4c3"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x8, 0x4, 0x3, 0x10, 0x5}, 0x8, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0xac, &(0x7f00000003c0)=@string={0xac, 0x3, "6eec593e498df795b15e4473f47f49f8d5ddc096cafff17c9b752de1bcb6827c3ad93bfd4c0da682d179753f6685ae90062179b793e582dcaddb557dc8c529613ffad17cd0d7429cb5da2777d4c7f26c2154f3ffa105bca28da90ae9442b1bd3b75cd5458416842e3405a1e944a5dd14ad48e0303c2bfcb41cbeddf98991b43887d8e717157d672b9b94ab4116c2a9d41c96ea1ca7209d8c316540992190e7d63dd67a0e75770d84a102"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0xa9, &(0x7f0000000580)=@string={0xa9, 0x3, "c81fe0d5fc03fd3f42bbd0ffecb839319943158c55ed0a353a5d9e0894497d7b139ebabba08dfdff2a472f20dd58dcfe2ace1f6bfe9e7016fd81e43d5e0717b09cf8d1900e02481aa7db65f2d6324adc548089daace8114b9de021d12f1e12043b0ccfd618f754f282b4bf7f9fd8bbab3048c7fb6bb7b2a6d6b5d132010f23a806a87c4ebfab64b641b86a9515a70b54a75a18f6bf2a90eb70d3799cee46fecab294fd6aae7785"}}, {0xd0, &(0x7f0000000640)=@string={0xd0, 0x3, "3901c60dccf94cb3aa83b42319cee55bc5dfdeb33f5fd6c7eaa4029363f49ebaf29940820925dc2596ec414b2f9850f01a0651d9dcc419952de8621839fbe46659e816e4561019969112eb7638d1216200c80c0583a6fbf624de8d76f39939e0d4e3aa2d81bd7ec35d1b7599894bff542525d6137afdb4d6a4d687a9af50c019a6c579422d23d1a92da761919fdcd2dc46add12e9fe84da1e73362e6c974ecfd1b47c28cf0e03075235770b6d6b8ec85c52ddeeaef53f99bb77678a6a826c298e766c861d36f649233ebedbac56f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x813}}, {0x76, &(0x7f0000000780)=@string={0x76, 0x3, "0247fca9de82ab7a2c618bc751167f4bbe6e06618d01babf4ee12283946593f0e80f8b7188d55f6452c295c423be617c94efe74aecb232cc5eb6b53b9f48c9455a592c542e9859346b0a55e5002cf7f2bb4ac651dde8e0bc63e354d93b5385f5b46732a11c73a66d18e38628a5ccdc661f52d075"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3c8, &(0x7f0000000900)={[{}, {0x95, 0x4e00, "301ac046f1172115c63f147555e5b3e227f3d9fb4c53ec23cb950c6a821499d3fc2b88b60a45cb61c1fef9416dfd96a5d4743108ede9497251007c0350bc3c9948b7b14963dcf99fcbdec3392145b02b283b5082f52fece805a61e4bcc540fc005722755b0f99289eb717e660f84326985f0a580aee105c4cb2c31e34374722a2032c1e8ede50d9eeac1af468d68c2ff7300e66dc0"}, {0x4, 0x4e00, "8fb78a69"}, {0x78, 0x4e00, "ee0e51dccd714f7b34dd1fb224136d60e9e51dcb95f89dbd26b5803581e0a8c95ecb3053ade63b3d6f67f14cfd8e70e7d0919041c611dffb044e2a666d19788e06d573407bf52b081fa14b52788b602ee2ae9eec7491c38d8d461f0a062984f25761d9d1cec956c61dcb567911483b6c6c064f3fb3cfe360"}, {0xfd, 0x4e00, "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"}, {0xf8, 0x4e00, "ea290c2e4ce88336b261a96c07fd7cb9f36987308c1ef5ada778c5931dd3553ffe548a6a3e11e2f99da5269c8b89478c11ad9f03f0f59efa98367ea332e36e6528dd32f9d98a1af6f506edeaa19440a34ac49bb50a41ae70aa689a2801151a62b33461c952d360665cd0fea7d7f205ab5ebae5a853b58f77b20c7c406566387971f31fe894f5304d008ed30911f72f816983c9a9d1b42296a0dd9f372959fc231dcca8c94b194aa21823f69b89ee20b8bd0cd4634511828e1c68727ac2bc804aa8b47b99808db6ed62e390252788860e4b240df8fc193427c64b94bfac30ca66363605f595ad599e5e2e61539658b70ae1911340e15c09ab"}, {0x9e, 0x4e00, "2ca615a2414e6c271ac24894ac0e8527a2aff4552671ea36279b9e34b815c7f327bb4c0301cae45ad7a0a91a25cb21e8f3bbbe25f2f68b50cd16ca6cf490988a19b85f18168eab1bb4c987e34c00d4690448f9f90039bba1ee7b3445f6214535babdcd01533e20256ab97ebff66beb7734909560560b09c9993858c67b5124c6ba6b7bbc959b67da82347a71e7a7a485c9538aa74e06293d2c3649ee5606"}]})
r3 = syz_open_dev$hidraw(&(0x7f0000000d00), 0x6, 0x80000)
r4 = syz_open_dev$hidraw(&(0x7f0000000d40), 0xc259, 0x0)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000d80)=""/235)
r5 = syz_usb_connect$midi(0x5, 0xb6, &(0x7f0000000e80)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x1, 0x1, 0x3, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x8, 0x1, [{0x4, 0xd}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xa0}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x7f, 0x2}, {0x1d, 0x7}, {0x80, 0xff}, {0x8, 0x81}], 0x9}], [{{0x9, 0x5, 0x35fb1c2d00e679e5, 0xc, 0x200, 0x3, 0x7, 0xd, {0xf, 0x25, 0x1, 0xb, "e31c518806825f11aa806c"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x7, 0x7, 0x2, {0xc, 0x25, 0x1, 0x8, "6e44f2bbb12f54fc"}}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x7, 0xd, 0xd, {0xa, 0x25, 0x1, 0x6, "c157c529f4f6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x75, 0x8, {0x12, 0x25, 0x1, 0xe, "218a636f6f1ccd429ca9aaedc5bc"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0xa, 0x1, 0xc2, 0x20, 0xb}, 0x19, &(0x7f0000000f80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6b22f53732c818d1d86b4bb6862a81c7"}]}, 0x8, [{0x4f, &(0x7f0000000fc0)=@string={0x4f, 0x3, "579c5b323ee1ec8cea9f0069ae46d5230a653589fcce49c7a2c7a8df5ad866fd7b2356b98fe2b92c43569267f6d1a007966a42bf46c76d43ff207552f55049d30dc6d9764c1bd25cb720ab94e2"}}, {0x4, &(0x7f0000001040)=@string={0x4, 0x3, "5d14"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1c09}}, {0x22, &(0x7f00000010c0)=@string={0x22, 0x3, "cb5579b514b7025e1fdd467d63581a8af794b3e80f4324397bd5e8b9bbea0021"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x438}}, {0xf7, &(0x7f00000011c0)=@string={0xf7, 0x3, "087dc1eb9b4f0bc1dcfa590860d282b6cd6390d30f38e3352d68c1448f3272283fe345f4a655c8e13346a5aed49e0b7585300f0e3ecb726aad76e2ce40559c6e3c580fee8c543939759e91b6a7aab65f28c6e469f6e08f7205f49fa610d6bb611478827d7de6308d970fdf0a006a25e7229590e80d3c23c75f08192389862c47a458fef2520bb24e8a709bab51cd98e72a839e990dd3378e62bfed2aeed41d200d468200c9e2a84f390a667e8e9fefde17eaf2a04880aaabba510d36005d6887c0c48686fb6c6d19fa2990399113fabcd58a48011cd835161041b635fbca2d6ac28899cb7331a47b174577c344dbf900e0fd9840fe"}}]})
syz_usb_disconnect(r5)
r6 = syz_open_dev$hiddev(&(0x7f0000001340), 0x9, 0x181081)
ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000001380)={0x3, 0x1, 0x780000})
r7 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3, 0x2c00)
ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000001400)=""/8)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000001440)={{0x3, 0x200, 0x4, 0x6, 0x2, 0x8}, 0x3b0, [0xffff, 0x1000, 0xfff, 0xa, 0xa30, 0x7, 0x401, 0x5, 0x7ff, 0x4, 0xc71d, 0x3, 0x915, 0x1, 0x2, 0x9, 0xa, 0x1, 0x7, 0x8, 0x9, 0xfffffffd, 0x4, 0xfffffffd, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0x5, 0x91, 0x3, 0x6, 0x0, 0xffffffc0, 0x2, 0x311, 0x1, 0x9, 0x400, 0x8, 0x9, 0x3, 0xd66, 0x771, 0x1, 0x2, 0xebd, 0x7af, 0x4, 0x6, 0x9, 0x1967, 0x80, 0x1000, 0x9, 0xfcbb, 0x5, 0xe, 0x6, 0x0, 0x6, 0x2, 0x4, 0xa, 0x1, 0x4, 0x101, 0x7, 0x60, 0x7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x3, 0x29, 0xfffffff8, 0x6, 0x2, 0x8, 0x20, 0x8, 0x1, 0x8, 0x7, 0x5, 0x0, 0x1ff, 0x6, 0x9, 0x0, 0x10001, 0x5, 0x802000, 0x4, 0xffffffff, 0x800, 0x4, 0x5, 0x7, 0x3, 0x1ff, 0x5, 0x5, 0x7, 0x5, 0x10000, 0xff, 0x2fd, 0x5, 0x0, 0x80000001, 0x8, 0x98, 0xc, 0x8, 0x21, 0x6, 0x3, 0x2, 0x3, 0x6, 0x87, 0x4, 0x0, 0xffff, 0x6, 0x7, 0x81, 0x9, 0x7f, 0x7, 0xffffffff, 0x44, 0x7fffffff, 0x1, 0x2, 0x8, 0x6, 0x1, 0x28b9, 0x9, 0x2, 0x0, 0x4e17, 0x200, 0x4, 0x6, 0xffff7ee9, 0xc1ec, 0x3ff, 0x38, 0xf246, 0x3, 0x2, 0x1, 0x0, 0x2, 0x56a9, 0x1, 0x1000, 0x0, 0x2, 0x7, 0xff, 0x7, 0x8, 0x3, 0x80, 0x6, 0x0, 0x400, 0x800, 0x80000001, 0x6, 0x7fff, 0x1, 0x22, 0x8, 0x7, 0x6, 0x6, 0x2, 0x6, 0x1, 0x32a7fed9, 0x8001, 0x3c29, 0x3, 0x99, 0x1, 0xfffffffa, 0x6, 0x2, 0x7, 0x10, 0x200, 0x4, 0xb, 0x0, 0x80, 0x4, 0x2, 0x6bfb, 0x1, 0x9, 0x400, 0x8, 0x3, 0x924, 0x72, 0x0, 0x9, 0x63, 0x7, 0x800, 0xd4e, 0x0, 0x5, 0xcdba, 0xecd9f1, 0x9, 0xa7c, 0x62, 0x77e6, 0x8, 0x80000000, 0x4e, 0x7f, 0x26, 0xdb6, 0x1, 0x61db, 0xb9, 0x101, 0x7, 0x3, 0x401, 0x10, 0x3ff, 0xc60, 0x3, 0x6, 0xe, 0x2, 0x4, 0x2000200, 0x2, 0xf, 0x7ff, 0x3, 0x0, 0x0, 0x80000001, 0x7f, 0xd0, 0x7fffffff, 0x6, 0x6, 0x9, 0x93a00000, 0x7fff, 0x3, 0x81, 0x32e, 0x2, 0x0, 0x99, 0x7, 0x8, 0xfffffffb, 0x5, 0x9, 0x401, 0x2, 0x40, 0x1000, 0x7, 0x3, 0x5, 0x8ecb, 0xffffffff, 0x5, 0xffffffbe, 0x7, 0xfff, 0x4, 0x4, 0x401, 0x10001, 0x6, 0xa78, 0x0, 0x2, 0x6, 0xfffffffd, 0x1, 0x3, 0x2, 0x0, 0x7, 0x10001, 0xc4, 0xffffe043, 0x2, 0x2, 0xfffff000, 0x3ff, 0x4bc, 0x9, 0x63c, 0x100, 0x741, 0x3, 0x1, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x0, 0x4, 0x2, 0x9, 0x5, 0x7ff, 0x8, 0x65, 0xff, 0x800, 0x5, 0x10000, 0x10, 0x2, 0x45, 0x2, 0x4, 0x4, 0x9, 0x0, 0x6, 0x5, 0x4, 0x3, 0x5, 0xa40, 0xffffffff, 0x7, 0x3, 0xff, 0x6, 0x100, 0x7f, 0x7, 0x9, 0x1d2, 0x40, 0x101, 0x4, 0x10, 0x3, 0x1, 0x0, 0x7ff, 0x8, 0x7, 0x7ff, 0x9, 0x7475, 0x7fff, 0x6, 0x7, 0x4, 0x0, 0x6, 0x1, 0x9, 0x1000, 0x2, 0x2, 0xb, 0x1, 0x4300, 0xd3c0, 0xfffffffb, 0x3, 0xa448, 0x7, 0xbaf2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x100, 0x2, 0x7, 0x5, 0x100, 0x0, 0x100, 0x4, 0x3, 0x192500, 0x0, 0x3, 0x9, 0x4, 0x6, 0xffff8001, 0x2, 0x9, 0x4, 0x6, 0xe, 0x10000, 0x0, 0x1, 0xc5, 0x6, 0x6, 0x1000, 0x9, 0x4, 0x0, 0x0, 0x2, 0x5, 0xffffffff, 0x7, 0x973b, 0x70, 0x1, 0xa3, 0x3, 0xff, 0x6, 0x0, 0x100, 0x7ff, 0x6, 0x3, 0x1, 0x1a0, 0x9, 0x0, 0x65, 0x10000, 0xdd59, 0xa81, 0x6, 0x5, 0x7f, 0x6, 0x6, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0xffffffff, 0x10, 0x9aa, 0xb20, 0x1, 0xab, 0x10001, 0x4, 0x8, 0x99f8, 0xb, 0x7, 0xf, 0x4, 0xc, 0x4, 0x1, 0x8, 0x1, 0x10, 0x8, 0x7, 0x3ff, 0x0, 0x9, 0x9b, 0x1, 0xffff7fff, 0x5, 0x6, 0x5, 0x9, 0x6, 0x7, 0x600, 0xffff6a0b, 0xc, 0xffff, 0x3, 0x4, 0xffffffff, 0x81, 0x6, 0x7, 0x1, 0x40c, 0x3, 0x0, 0x6, 0x1ff, 0xa, 0xf5795e5a, 0x3, 0x8, 0x4, 0x3, 0xa943, 0x9, 0x80000001, 0x6, 0x1, 0x7, 0x0, 0x7, 0x1, 0xe, 0x6, 0x1, 0x3, 0x7f, 0x3, 0x101, 0x4, 0x1, 0x10001, 0x7, 0xffffffff, 0x5, 0x2, 0xfff, 0x1, 0x6, 0x80000000, 0xe6f, 0x1, 0x0, 0x8, 0x6, 0x8, 0x2, 0xffff, 0xa1, 0x0, 0x5, 0x9f5, 0x8, 0x3, 0x40, 0x4, 0x8, 0xe6f5, 0x0, 0x2, 0x0, 0x1ff, 0x5, 0x1, 0x7, 0x10000, 0x6baf, 0x3, 0x8000, 0x1, 0xfffffffb, 0x2, 0xeed3, 0x8, 0x3, 0x5, 0x600, 0x7ec8, 0x2, 0x6, 0x9, 0xb, 0x5, 0x2, 0x401, 0x80000000, 0x4744, 0x10001, 0x0, 0x4, 0x2, 0xed2, 0x3, 0x3, 0x8533, 0xa0b, 0x7fffffff, 0x3, 0x2, 0x1, 0xe8, 0x100, 0x9, 0x4, 0x10, 0xfffffff7, 0x8, 0x3, 0x0, 0x510, 0x0, 0x3, 0xb, 0x2, 0x8, 0x7, 0x101, 0x3ff, 0x5, 0x1, 0x8001, 0x0, 0xffffffff, 0x8, 0xfff, 0x400, 0x80, 0x53f5, 0x7ba, 0x1000, 0x6, 0x100, 0x26, 0x5, 0x1, 0x2, 0xffff, 0x1, 0x6, 0x2, 0x6, 0x9e0, 0x2, 0x3, 0x3, 0x1ac12aea, 0x9, 0x2, 0x5, 0xfffff000, 0x8, 0x84e7, 0x54b8, 0x8, 0x400, 0x7, 0x8, 0x1, 0x0, 0xf, 0x5, 0x1, 0x48, 0x200, 0xd, 0x3d2a, 0x0, 0x7, 0x1, 0x4, 0x7fff, 0x800, 0x6, 0x0, 0x7b, 0xca, 0x1, 0x1, 0xf, 0xa, 0xffff31dc, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x6, 0xb7, 0x66, 0x7, 0x9, 0x0, 0x5, 0x4ac50617, 0x6, 0x2, 0x2, 0x6, 0xb3c, 0x0, 0xfffffffa, 0x8f, 0x800, 0x8bc, 0xffffffc0, 0x69, 0xffff, 0x5, 0x52a5, 0x6, 0x7, 0xc5, 0x4, 0x10, 0x1ff, 0x8000, 0x8, 0x9, 0xffffff41, 0x6, 0x6, 0x1, 0x67, 0x7, 0xfffff691, 0x3, 0x8, 0xfffffffa, 0xc7, 0x10001, 0x80000000, 0x3, 0xffff, 0x51f0, 0xa, 0x8001, 0x7, 0xe82f, 0xf, 0x101, 0x2, 0x101, 0x9, 0x80, 0x22, 0x4, 0xffff, 0x9, 0x3, 0x3ff, 0x6, 0xd6, 0x6, 0x5, 0x21, 0x2, 0x8, 0xe, 0x800, 0xcd, 0x5, 0x6, 0x80000000, 0x5, 0x73fc, 0x4, 0xea9c05a, 0x6, 0x7, 0x57, 0x7, 0x3, 0x2d, 0x6, 0x2, 0x6, 0x4, 0x6, 0x8, 0xffff, 0xad, 0x2, 0x8, 0x0, 0x80, 0x3, 0x8, 0x2, 0x878b, 0x100, 0x7, 0x1ff, 0x79, 0x200, 0x3, 0x4, 0x9, 0xffffffa3, 0x101, 0x6, 0x2, 0xf8, 0x100, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x5, 0x0, 0x6, 0x7, 0x100, 0x0, 0x8, 0x9, 0x1, 0x4, 0x8, 0x101, 0x1, 0x4, 0x81, 0x4, 0x5, 0x2bc5, 0xb, 0x9, 0x0, 0x40, 0xbc, 0x8, 0x1ff, 0x3, 0xf30, 0x3, 0x5, 0xfffff965, 0x44dd, 0x7fffffff, 0x8000, 0x9, 0xf1, 0x80000000, 0x4, 0xffffffff, 0x0, 0x1, 0x7, 0xf4, 0x7, 0x1, 0xfb, 0x4, 0x48, 0x7fffffff, 0x7ff, 0x2731, 0x3, 0x6, 0xc00, 0x1000, 0x3, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x3, 0x5, 0x5, 0x1, 0xc00, 0x6, 0x1, 0x9, 0x200, 0x4e5c, 0x80000000, 0x3cc8b1f4, 0x1, 0x0, 0x401, 0xffffff0b, 0x42c3, 0x3, 0x9, 0xd, 0x9, 0x4, 0x1, 0xffff, 0x1, 0x4e39, 0x8, 0x80000000, 0x8001, 0x6, 0x9, 0x7fff, 0x8, 0xfff, 0x9, 0x4, 0x100, 0x2, 0x2, 0x7, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x61d, 0x3, 0x5, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x4, 0x8000, 0x7f, 0x3, 0x3a75, 0x7, 0x1, 0x100, 0xfff, 0x800, 0x0, 0xe, 0x47d9, 0x9, 0x3, 0x5, 0x4d04, 0x6, 0x120, 0x2, 0x6, 0xfffffffa, 0x9, 0x2, 0xf133, 0x0, 0x8, 0x3, 0xffffffff, 0x2, 0x0, 0x781e, 0x0, 0x4, 0x1, 0x9, 0x9, 0x99, 0x9afc, 0xfffffff3, 0x976d, 0x8, 0x200, 0x100, 0x2, 0x5, 0xfffffbff, 0x7ff, 0xf, 0xc7, 0x1, 0x6, 0x80000001, 0x2, 0x7, 0x8, 0x7, 0x3e268a1f, 0x4, 0x929a, 0x2, 0x2, 0x10000, 0xe, 0x4, 0x3, 0x7, 0x9, 0x3, 0x2255, 0x62, 0x8, 0x45e, 0x9, 0x9, 0x2, 0x2dc, 0x0, 0x10001, 0xec8, 0x9, 0x9, 0x2, 0xf79e, 0x5, 0x2, 0x4, 0x10001, 0x1, 0x5, 0xded, 0x31]})
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000002480)={0x6, "33878ece3ed0722983b73970f7e3bd819354d537842749a66d129fcf538215e048ba20f39de3441d8d164da66fd1207a9490b689907a32d03e4828ed6a4a9c2a"})
syz_usb_ep_write(r2, 0x6, 0x55, &(0x7f0000002500)="247c9b18d30e33cada1d48cbd9aa36b317e9b4e98510d630962608ffd3a9112ff57cc610cbfe87eb5565b7781d6420bbfcbf63194bc095ee346f30175eaa63c43227eb118613478a2314efb16cb4dc41c24e4d5797")
syz_usb_control_io(r2, &(0x7f0000002900)={0x2c, &(0x7f0000002580)={0x20, 0x9, 0xf3, {0xf3, 0xf, "d52fd064aabac700b55daf4c3cffff66d02a6f16f1ca68defd187e7f2b0e089ab0a72676749e5742a3ccd0946abf01bf1f399e274a343a533e3576c21eee5bf7e7b402880674c879837db865654204fa703291be4770fef8eea03334138ef0b989ff1f015d1c5ab73dfff8eb5b064e333ecd85c4b3dce67d8d17990a0e5d9dc07cd1850b91acf93393f0939304eaf2016fdfc40d6515b7d5ee7ef044868eee30cec60f17e4d0d4a56258f4c97ad91d2ed2ddc0c8c5019ce7d41fbe52d1238f8b11c10b3e7abeac35f4f0315abe240bfb2accdb37964621b7ef637a503a73e99d72707130b08c81bad552f508f1e9a8d176"}}, &(0x7f0000002680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000026c0)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@ptm_cap={0x3}, @generic={0x69, 0x10, 0xa, "6c7e77e729a3e31b467d9a3294954883268b53faeb06a16f6f6e115f45801c112b458081b1ade911b280ec949aa1311bc562ea14e04607387c1e2720288f9eab263b662a281e821d7739b1b82a8d4bfe1df0c88a2eb34c4072a257652ab54263321269dbf990"}, @generic={0x29, 0x10, 0x4, "2dd679f7a270f012b7f89607d27db6e8af13a86db4be5b221e783b98b8135d3e60fc0991d450"}, @generic={0xfb, 0x10, 0x3, "06eac6a36753dba4e529fe71362ab57e72abb2621be44e69f71e4cd06b9398ce5c320e1a98e1bb62e5e10562350cf840f4af06a551c2c70b39de0532395a48296fa72629d18da2f0d45d945e221ba6c92e9ec096ed0d49849ab585b06f3dd3cb93de848d3338fab5648055478cd11e63e94fb2fa74328e43e6b08f3880fdf5b797b55144428aa59eba81f5d5dfa086700aa8444f3917570695f9370c25a231594976e3f46913b9824274da668a607eaa7a2958840ccb02e4d3f1563d50af70499d00bc1c63c7aa908ae411fb8caea157cbfae0b27a23ddd2baf7a9795344a025a8d809544ced95fab394de878d00c6d43cd6224d3bf3a2ee"}]}}, &(0x7f0000002880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x1b, 0x1, 0x0, "c3da9dd3", "49b8a637"}}, &(0x7f00000028c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x0, 0x7f, 0x9, 0x7, 0x4}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002940)={0x20, 0x8, 0x1c, "c63e453a2bde87eb3737a259c6c3dc85a3a9aa94f9fd65cfadd1dd1e"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x2, 0x4, [0xf00f]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0xd5b8}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "f3da"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002b80)={0x40, 0x13, 0x6}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "0c9c"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0xfe}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002d00)={0x40, 0x21, 0x1}})
syz_usb_control_io$uac1(r5, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0x2, 0x96, {0x96, 0xd, "5ba6b421ef64da824889a11ecb0d94b7cfceec12b1a156430f524e9b355015ed1fbf4135626601da4f6aca89bd6a97a7e3c3c357e10765d124c805e9f2bbd72eb34c8e4350cfb0aea801930a19c5feec34362557c7d3616d8a1d853398f0a350388f73034b25f281ee3e13dc8883c53412af58271c40ab6080b4fc3bd53c76cd780d12b8732407805426115c2079a29cd621929e"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000003200)={0x44, &(0x7f0000002f40)={0x20, 0x31, 0xcf, "25ea09078acce2420fce1206c4c96e3e8e471bbb69e9e21eb8af4df4a0004ecde4fd3b6774a37c890cdf7b96f791c69adc17ef8d9ab1a379b9302ac66d4d557d178c013220f00f188f1b3745234f013a88b6b02dfd2b9922b0aacd5de370b944ea1b2057bc255f9c18bc5f8e148b86f1bc63d2077f3e35b0b15e72a7d7fddf2519611179ce6098015d46b35472489c44b41311fa2764e8ffb910b91e125eff9c879a5fbbb413627f26f1fee99ca4821cb21d93278ebd39610bc6c4f39b2322fc459dc13a08c823c3c2424ae39d02ed"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000030c0)={0x20, 0x81, 0x2, "b5a5"}, &(0x7f0000003100)={0x20, 0x82, 0x1, "89"}, &(0x7f0000003140)={0x20, 0x83, 0x3, "0e249c"}, &(0x7f0000003180)={0x20, 0x84, 0x1, '<'}, &(0x7f00000031c0)={0x20, 0x85, 0x3, "1a8a28"}})
ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000003280))
r8 = syz_open_dev$evdev(&(0x7f00000032c0), 0x7, 0x8200)
ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000003300)=""/157)
read$hidraw(r1, &(0x7f00000033c0)=""/128, 0x80)
syz_usb_control_io$printer(r2, &(0x7f00000034c0)={0x14, &(0x7f0000003440)={0x0, 0x10, 0x1a, {0x1a, 0xd, "3f757ed882ccbdb2563b3b5ca69f3e15ab27fbfb284c3461"}}, &(0x7f0000003480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000003740)={0x34, &(0x7f0000003500)={0x0, 0xe, 0x5, "12d3f64bd4"}, &(0x7f0000003540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000003580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000035c0)={0x20, 0x0, 0xf5, {0xf3, "0ea7c8008ef26143149635411a5e999376516de27c17dc4770e96952ab4f17d71ce7bc6f0b3a009eafd8addf705514d5405654f6056fd602c65aa939878bba6f8fb06aed6113a16edbb84fd616413658721232bc807c3d2b8ac49c91b5ad26bf58110332bb9eb34906c4e81045c9e2a86134390d071881f8c86bbccd9df2abfe793a7fa6772e7151fc01c9679dd77a88b1dd4921a7471cac3b86f21e033666e5fb559d141e05d750a187a0f552bd1377230f0913cea75ef3ffe304c91ab54afb118ca25b33676453ae60247f1db58015e6be8259f35e354f5a30268e16c469e43a96300386f52e7670eba6af97809e04b60ac0"}}, &(0x7f00000036c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003700)={0x20, 0x0, 0x1, 0x1}})
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000003780)={0x8, 0x0, 0x8, 0xffffffff, 0x0, 0x5})
ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000037c0))
syz_usb_control_io$lan78xx(r5, &(0x7f0000003900)={0x14, &(0x7f0000003800)={0x0, 0x30, 0x59, {0x59, 0xe, "b22acf731b83ba374d1311ac2bf283716ca0485220392af6ad14205c71d323ac8ae1153e88d078f004fd4a6b736c22fe591f87b302177d0722a4c97f2ffc93f4c11a7b011fb96aa66a4274c7b197cda6353468d35dc2c5"}}, &(0x7f0000003880)={0x0, 0x3, 0x70, @string={0x70, 0x3, "ce4f9e8329706ae06e7dd0d5bb0523df424a4d7871860336688d0364ee086270837dca935276a01802237f636a0069868e83cdab75be9003af8be076c50d76ba0dced656725474c9bf8af54919733bf94d3c05ddb3ba560ab6e48966873968364052cb5533cd89022b3467d2538d"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003940)={0x40, 0x16, 0x35, "d711fd192258f1ec1638a1679bee7d5f3ea6fe7ced37ce4488805ed9de3b2314f832b65d2ff63d9705c06c7a020eb56f92851a1e1d"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000039c0)={0x0, 0x8, 0x1}, &(0x7f0000003a00)={0xc0, 0xa1, 0x4, 0xc}, &(0x7f0000003a40)={0x40, 0xa0, 0x4, 0x40}, &(0x7f0000003a80)={0xc0, 0xa2, 0x2f, "9fc466298528f12223401bd467522fdb2e385abe368cb0f6ee5c37790ad684f29864981d415bc8f3f13125b104781b"}})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-write$hidraw-ioctl$HIDIOCGRAWINFO-ioctl$HIDIOCGRAWPHYS-syz_open_dev$hidraw-read$hidraw-syz_usb_connect$midi-syz_usb_ep_write$ath9k_ep1-syz_open_dev$hidraw-syz_open_dev$hidraw-ioctl$HIDIOCGRAWINFO-syz_usb_connect$midi-syz_usb_disconnect-syz_open_dev$hiddev-ioctl$HIDIOCGREPORTINFO-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-ioctl$HIDIOCSUSAGES-ioctl$HIDIOCGFEATURE-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$uac1-ioctl$HIDIOCGVERSION-syz_open_dev$evdev-ioctl$EVIOCGSW-read$hidraw-syz_usb_control_io$printer-ioctl$EVIOCSABS20-ioctl$HIDIOCGRDESCSIZE-syz_usb_control_io$lan78xx
detailed listing:
executing program 0:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800)
write$hidraw(r0, &(0x7f0000000040)="caaf5d1130d55c3f91cc7b6093", 0xd)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/135)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000140))
r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x0)
read$hidraw(r1, &(0x7f00000001c0)=""/201, 0xc9)
r2 = syz_usb_connect$midi(0x6, 0x61, &(0x7f00000002c0)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1, 0x60, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0xce, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x3, 0x7, [{0x19, 0xc8}, {0x7, 0x7}, {0x3b, 0x9}, {0x8, 0x5e}, {0x56, 0x7}, {0x0, 0x7}, {0x2}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x4, 0x3, {0x11, 0x25, 0x1, 0xd, "b7c6959942c06a29856314d4c3"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x8, 0x4, 0x3, 0x10, 0x5}, 0x8, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0xac, &(0x7f00000003c0)=@string={0xac, 0x3, "6eec593e498df795b15e4473f47f49f8d5ddc096cafff17c9b752de1bcb6827c3ad93bfd4c0da682d179753f6685ae90062179b793e582dcaddb557dc8c529613ffad17cd0d7429cb5da2777d4c7f26c2154f3ffa105bca28da90ae9442b1bd3b75cd5458416842e3405a1e944a5dd14ad48e0303c2bfcb41cbeddf98991b43887d8e717157d672b9b94ab4116c2a9d41c96ea1ca7209d8c316540992190e7d63dd67a0e75770d84a102"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0xa9, &(0x7f0000000580)=@string={0xa9, 0x3, "c81fe0d5fc03fd3f42bbd0ffecb839319943158c55ed0a353a5d9e0894497d7b139ebabba08dfdff2a472f20dd58dcfe2ace1f6bfe9e7016fd81e43d5e0717b09cf8d1900e02481aa7db65f2d6324adc548089daace8114b9de021d12f1e12043b0ccfd618f754f282b4bf7f9fd8bbab3048c7fb6bb7b2a6d6b5d132010f23a806a87c4ebfab64b641b86a9515a70b54a75a18f6bf2a90eb70d3799cee46fecab294fd6aae7785"}}, {0xd0, &(0x7f0000000640)=@string={0xd0, 0x3, "3901c60dccf94cb3aa83b42319cee55bc5dfdeb33f5fd6c7eaa4029363f49ebaf29940820925dc2596ec414b2f9850f01a0651d9dcc419952de8621839fbe46659e816e4561019969112eb7638d1216200c80c0583a6fbf624de8d76f39939e0d4e3aa2d81bd7ec35d1b7599894bff542525d6137afdb4d6a4d687a9af50c019a6c579422d23d1a92da761919fdcd2dc46add12e9fe84da1e73362e6c974ecfd1b47c28cf0e03075235770b6d6b8ec85c52ddeeaef53f99bb77678a6a826c298e766c861d36f649233ebedbac56f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x813}}, {0x76, &(0x7f0000000780)=@string={0x76, 0x3, "0247fca9de82ab7a2c618bc751167f4bbe6e06618d01babf4ee12283946593f0e80f8b7188d55f6452c295c423be617c94efe74aecb232cc5eb6b53b9f48c9455a592c542e9859346b0a55e5002cf7f2bb4ac651dde8e0bc63e354d93b5385f5b46732a11c73a66d18e38628a5ccdc661f52d075"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x3c8, &(0x7f0000000900)={[{}, {0x95, 0x4e00, "301ac046f1172115c63f147555e5b3e227f3d9fb4c53ec23cb950c6a821499d3fc2b88b60a45cb61c1fef9416dfd96a5d4743108ede9497251007c0350bc3c9948b7b14963dcf99fcbdec3392145b02b283b5082f52fece805a61e4bcc540fc005722755b0f99289eb717e660f84326985f0a580aee105c4cb2c31e34374722a2032c1e8ede50d9eeac1af468d68c2ff7300e66dc0"}, {0x4, 0x4e00, "8fb78a69"}, {0x78, 0x4e00, "ee0e51dccd714f7b34dd1fb224136d60e9e51dcb95f89dbd26b5803581e0a8c95ecb3053ade63b3d6f67f14cfd8e70e7d0919041c611dffb044e2a666d19788e06d573407bf52b081fa14b52788b602ee2ae9eec7491c38d8d461f0a062984f25761d9d1cec956c61dcb567911483b6c6c064f3fb3cfe360"}, {0xfd, 0x4e00, "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"}, {0xf8, 0x4e00, "ea290c2e4ce88336b261a96c07fd7cb9f36987308c1ef5ada778c5931dd3553ffe548a6a3e11e2f99da5269c8b89478c11ad9f03f0f59efa98367ea332e36e6528dd32f9d98a1af6f506edeaa19440a34ac49bb50a41ae70aa689a2801151a62b33461c952d360665cd0fea7d7f205ab5ebae5a853b58f77b20c7c406566387971f31fe894f5304d008ed30911f72f816983c9a9d1b42296a0dd9f372959fc231dcca8c94b194aa21823f69b89ee20b8bd0cd4634511828e1c68727ac2bc804aa8b47b99808db6ed62e390252788860e4b240df8fc193427c64b94bfac30ca66363605f595ad599e5e2e61539658b70ae1911340e15c09ab"}, {0x9e, 0x4e00, "2ca615a2414e6c271ac24894ac0e8527a2aff4552671ea36279b9e34b815c7f327bb4c0301cae45ad7a0a91a25cb21e8f3bbbe25f2f68b50cd16ca6cf490988a19b85f18168eab1bb4c987e34c00d4690448f9f90039bba1ee7b3445f6214535babdcd01533e20256ab97ebff66beb7734909560560b09c9993858c67b5124c6ba6b7bbc959b67da82347a71e7a7a485c9538aa74e06293d2c3649ee5606"}]})
r3 = syz_open_dev$hidraw(&(0x7f0000000d00), 0x6, 0x80000)
r4 = syz_open_dev$hidraw(&(0x7f0000000d40), 0xc259, 0x0)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000d80)=""/235)
r5 = syz_usb_connect$midi(0x5, 0xb6, &(0x7f0000000e80)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x1, 0x1, 0x3, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x8, 0x1, [{0x4, 0xd}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xa0}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x7f, 0x2}, {0x1d, 0x7}, {0x80, 0xff}, {0x8, 0x81}], 0x9}], [{{0x9, 0x5, 0x35fb1c2d00e679e5, 0xc, 0x200, 0x3, 0x7, 0xd, {0xf, 0x25, 0x1, 0xb, "e31c518806825f11aa806c"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x7, 0x7, 0x2, {0xc, 0x25, 0x1, 0x8, "6e44f2bbb12f54fc"}}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x7, 0xd, 0xd, {0xa, 0x25, 0x1, 0x6, "c157c529f4f6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x75, 0x8, {0x12, 0x25, 0x1, 0xe, "218a636f6f1ccd429ca9aaedc5bc"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0xa, 0x1, 0xc2, 0x20, 0xb}, 0x19, &(0x7f0000000f80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6b22f53732c818d1d86b4bb6862a81c7"}]}, 0x8, [{0x4f, &(0x7f0000000fc0)=@string={0x4f, 0x3, "579c5b323ee1ec8cea9f0069ae46d5230a653589fcce49c7a2c7a8df5ad866fd7b2356b98fe2b92c43569267f6d1a007966a42bf46c76d43ff207552f55049d30dc6d9764c1bd25cb720ab94e2"}}, {0x4, &(0x7f0000001040)=@string={0x4, 0x3, "5d14"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1c09}}, {0x22, &(0x7f00000010c0)=@string={0x22, 0x3, "cb5579b514b7025e1fdd467d63581a8af794b3e80f4324397bd5e8b9bbea0021"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x438}}, {0xf7, &(0x7f00000011c0)=@string={0xf7, 0x3, "087dc1eb9b4f0bc1dcfa590860d282b6cd6390d30f38e3352d68c1448f3272283fe345f4a655c8e13346a5aed49e0b7585300f0e3ecb726aad76e2ce40559c6e3c580fee8c543939759e91b6a7aab65f28c6e469f6e08f7205f49fa610d6bb611478827d7de6308d970fdf0a006a25e7229590e80d3c23c75f08192389862c47a458fef2520bb24e8a709bab51cd98e72a839e990dd3378e62bfed2aeed41d200d468200c9e2a84f390a667e8e9fefde17eaf2a04880aaabba510d36005d6887c0c48686fb6c6d19fa2990399113fabcd58a48011cd835161041b635fbca2d6ac28899cb7331a47b174577c344dbf900e0fd9840fe"}}]})
syz_usb_disconnect(r5)
r6 = syz_open_dev$hiddev(&(0x7f0000001340), 0x9, 0x181081)
ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000001380)={0x3, 0x1, 0x780000})
r7 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3, 0x2c00)
ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000001400)=""/8)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000001440)={{0x3, 0x200, 0x4, 0x6, 0x2, 0x8}, 0x3b0, [0xffff, 0x1000, 0xfff, 0xa, 0xa30, 0x7, 0x401, 0x5, 0x7ff, 0x4, 0xc71d, 0x3, 0x915, 0x1, 0x2, 0x9, 0xa, 0x1, 0x7, 0x8, 0x9, 0xfffffffd, 0x4, 0xfffffffd, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0x5, 0x91, 0x3, 0x6, 0x0, 0xffffffc0, 0x2, 0x311, 0x1, 0x9, 0x400, 0x8, 0x9, 0x3, 0xd66, 0x771, 0x1, 0x2, 0xebd, 0x7af, 0x4, 0x6, 0x9, 0x1967, 0x80, 0x1000, 0x9, 0xfcbb, 0x5, 0xe, 0x6, 0x0, 0x6, 0x2, 0x4, 0xa, 0x1, 0x4, 0x101, 0x7, 0x60, 0x7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x3, 0x29, 0xfffffff8, 0x6, 0x2, 0x8, 0x20, 0x8, 0x1, 0x8, 0x7, 0x5, 0x0, 0x1ff, 0x6, 0x9, 0x0, 0x10001, 0x5, 0x802000, 0x4, 0xffffffff, 0x800, 0x4, 0x5, 0x7, 0x3, 0x1ff, 0x5, 0x5, 0x7, 0x5, 0x10000, 0xff, 0x2fd, 0x5, 0x0, 0x80000001, 0x8, 0x98, 0xc, 0x8, 0x21, 0x6, 0x3, 0x2, 0x3, 0x6, 0x87, 0x4, 0x0, 0xffff, 0x6, 0x7, 0x81, 0x9, 0x7f, 0x7, 0xffffffff, 0x44, 0x7fffffff, 0x1, 0x2, 0x8, 0x6, 0x1, 0x28b9, 0x9, 0x2, 0x0, 0x4e17, 0x200, 0x4, 0x6, 0xffff7ee9, 0xc1ec, 0x3ff, 0x38, 0xf246, 0x3, 0x2, 0x1, 0x0, 0x2, 0x56a9, 0x1, 0x1000, 0x0, 0x2, 0x7, 0xff, 0x7, 0x8, 0x3, 0x80, 0x6, 0x0, 0x400, 0x800, 0x80000001, 0x6, 0x7fff, 0x1, 0x22, 0x8, 0x7, 0x6, 0x6, 0x2, 0x6, 0x1, 0x32a7fed9, 0x8001, 0x3c29, 0x3, 0x99, 0x1, 0xfffffffa, 0x6, 0x2, 0x7, 0x10, 0x200, 0x4, 0xb, 0x0, 0x80, 0x4, 0x2, 0x6bfb, 0x1, 0x9, 0x400, 0x8, 0x3, 0x924, 0x72, 0x0, 0x9, 0x63, 0x7, 0x800, 0xd4e, 0x0, 0x5, 0xcdba, 0xecd9f1, 0x9, 0xa7c, 0x62, 0x77e6, 0x8, 0x80000000, 0x4e, 0x7f, 0x26, 0xdb6, 0x1, 0x61db, 0xb9, 0x101, 0x7, 0x3, 0x401, 0x10, 0x3ff, 0xc60, 0x3, 0x6, 0xe, 0x2, 0x4, 0x2000200, 0x2, 0xf, 0x7ff, 0x3, 0x0, 0x0, 0x80000001, 0x7f, 0xd0, 0x7fffffff, 0x6, 0x6, 0x9, 0x93a00000, 0x7fff, 0x3, 0x81, 0x32e, 0x2, 0x0, 0x99, 0x7, 0x8, 0xfffffffb, 0x5, 0x9, 0x401, 0x2, 0x40, 0x1000, 0x7, 0x3, 0x5, 0x8ecb, 0xffffffff, 0x5, 0xffffffbe, 0x7, 0xfff, 0x4, 0x4, 0x401, 0x10001, 0x6, 0xa78, 0x0, 0x2, 0x6, 0xfffffffd, 0x1, 0x3, 0x2, 0x0, 0x7, 0x10001, 0xc4, 0xffffe043, 0x2, 0x2, 0xfffff000, 0x3ff, 0x4bc, 0x9, 0x63c, 0x100, 0x741, 0x3, 0x1, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x0, 0x4, 0x2, 0x9, 0x5, 0x7ff, 0x8, 0x65, 0xff, 0x800, 0x5, 0x10000, 0x10, 0x2, 0x45, 0x2, 0x4, 0x4, 0x9, 0x0, 0x6, 0x5, 0x4, 0x3, 0x5, 0xa40, 0xffffffff, 0x7, 0x3, 0xff, 0x6, 0x100, 0x7f, 0x7, 0x9, 0x1d2, 0x40, 0x101, 0x4, 0x10, 0x3, 0x1, 0x0, 0x7ff, 0x8, 0x7, 0x7ff, 0x9, 0x7475, 0x7fff, 0x6, 0x7, 0x4, 0x0, 0x6, 0x1, 0x9, 0x1000, 0x2, 0x2, 0xb, 0x1, 0x4300, 0xd3c0, 0xfffffffb, 0x3, 0xa448, 0x7, 0xbaf2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x100, 0x2, 0x7, 0x5, 0x100, 0x0, 0x100, 0x4, 0x3, 0x192500, 0x0, 0x3, 0x9, 0x4, 0x6, 0xffff8001, 0x2, 0x9, 0x4, 0x6, 0xe, 0x10000, 0x0, 0x1, 0xc5, 0x6, 0x6, 0x1000, 0x9, 0x4, 0x0, 0x0, 0x2, 0x5, 0xffffffff, 0x7, 0x973b, 0x70, 0x1, 0xa3, 0x3, 0xff, 0x6, 0x0, 0x100, 0x7ff, 0x6, 0x3, 0x1, 0x1a0, 0x9, 0x0, 0x65, 0x10000, 0xdd59, 0xa81, 0x6, 0x5, 0x7f, 0x6, 0x6, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0xffffffff, 0x10, 0x9aa, 0xb20, 0x1, 0xab, 0x10001, 0x4, 0x8, 0x99f8, 0xb, 0x7, 0xf, 0x4, 0xc, 0x4, 0x1, 0x8, 0x1, 0x10, 0x8, 0x7, 0x3ff, 0x0, 0x9, 0x9b, 0x1, 0xffff7fff, 0x5, 0x6, 0x5, 0x9, 0x6, 0x7, 0x600, 0xffff6a0b, 0xc, 0xffff, 0x3, 0x4, 0xffffffff, 0x81, 0x6, 0x7, 0x1, 0x40c, 0x3, 0x0, 0x6, 0x1ff, 0xa, 0xf5795e5a, 0x3, 0x8, 0x4, 0x3, 0xa943, 0x9, 0x80000001, 0x6, 0x1, 0x7, 0x0, 0x7, 0x1, 0xe, 0x6, 0x1, 0x3, 0x7f, 0x3, 0x101, 0x4, 0x1, 0x10001, 0x7, 0xffffffff, 0x5, 0x2, 0xfff, 0x1, 0x6, 0x80000000, 0xe6f, 0x1, 0x0, 0x8, 0x6, 0x8, 0x2, 0xffff, 0xa1, 0x0, 0x5, 0x9f5, 0x8, 0x3, 0x40, 0x4, 0x8, 0xe6f5, 0x0, 0x2, 0x0, 0x1ff, 0x5, 0x1, 0x7, 0x10000, 0x6baf, 0x3, 0x8000, 0x1, 0xfffffffb, 0x2, 0xeed3, 0x8, 0x3, 0x5, 0x600, 0x7ec8, 0x2, 0x6, 0x9, 0xb, 0x5, 0x2, 0x401, 0x80000000, 0x4744, 0x10001, 0x0, 0x4, 0x2, 0xed2, 0x3, 0x3, 0x8533, 0xa0b, 0x7fffffff, 0x3, 0x2, 0x1, 0xe8, 0x100, 0x9, 0x4, 0x10, 0xfffffff7, 0x8, 0x3, 0x0, 0x510, 0x0, 0x3, 0xb, 0x2, 0x8, 0x7, 0x101, 0x3ff, 0x5, 0x1, 0x8001, 0x0, 0xffffffff, 0x8, 0xfff, 0x400, 0x80, 0x53f5, 0x7ba, 0x1000, 0x6, 0x100, 0x26, 0x5, 0x1, 0x2, 0xffff, 0x1, 0x6, 0x2, 0x6, 0x9e0, 0x2, 0x3, 0x3, 0x1ac12aea, 0x9, 0x2, 0x5, 0xfffff000, 0x8, 0x84e7, 0x54b8, 0x8, 0x400, 0x7, 0x8, 0x1, 0x0, 0xf, 0x5, 0x1, 0x48, 0x200, 0xd, 0x3d2a, 0x0, 0x7, 0x1, 0x4, 0x7fff, 0x800, 0x6, 0x0, 0x7b, 0xca, 0x1, 0x1, 0xf, 0xa, 0xffff31dc, 0x10000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x6, 0xb7, 0x66, 0x7, 0x9, 0x0, 0x5, 0x4ac50617, 0x6, 0x2, 0x2, 0x6, 0xb3c, 0x0, 0xfffffffa, 0x8f, 0x800, 0x8bc, 0xffffffc0, 0x69, 0xffff, 0x5, 0x52a5, 0x6, 0x7, 0xc5, 0x4, 0x10, 0x1ff, 0x8000, 0x8, 0x9, 0xffffff41, 0x6, 0x6, 0x1, 0x67, 0x7, 0xfffff691, 0x3, 0x8, 0xfffffffa, 0xc7, 0x10001, 0x80000000, 0x3, 0xffff, 0x51f0, 0xa, 0x8001, 0x7, 0xe82f, 0xf, 0x101, 0x2, 0x101, 0x9, 0x80, 0x22, 0x4, 0xffff, 0x9, 0x3, 0x3ff, 0x6, 0xd6, 0x6, 0x5, 0x21, 0x2, 0x8, 0xe, 0x800, 0xcd, 0x5, 0x6, 0x80000000, 0x5, 0x73fc, 0x4, 0xea9c05a, 0x6, 0x7, 0x57, 0x7, 0x3, 0x2d, 0x6, 0x2, 0x6, 0x4, 0x6, 0x8, 0xffff, 0xad, 0x2, 0x8, 0x0, 0x80, 0x3, 0x8, 0x2, 0x878b, 0x100, 0x7, 0x1ff, 0x79, 0x200, 0x3, 0x4, 0x9, 0xffffffa3, 0x101, 0x6, 0x2, 0xf8, 0x100, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x5, 0x0, 0x6, 0x7, 0x100, 0x0, 0x8, 0x9, 0x1, 0x4, 0x8, 0x101, 0x1, 0x4, 0x81, 0x4, 0x5, 0x2bc5, 0xb, 0x9, 0x0, 0x40, 0xbc, 0x8, 0x1ff, 0x3, 0xf30, 0x3, 0x5, 0xfffff965, 0x44dd, 0x7fffffff, 0x8000, 0x9, 0xf1, 0x80000000, 0x4, 0xffffffff, 0x0, 0x1, 0x7, 0xf4, 0x7, 0x1, 0xfb, 0x4, 0x48, 0x7fffffff, 0x7ff, 0x2731, 0x3, 0x6, 0xc00, 0x1000, 0x3, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x3, 0x5, 0x5, 0x1, 0xc00, 0x6, 0x1, 0x9, 0x200, 0x4e5c, 0x80000000, 0x3cc8b1f4, 0x1, 0x0, 0x401, 0xffffff0b, 0x42c3, 0x3, 0x9, 0xd, 0x9, 0x4, 0x1, 0xffff, 0x1, 0x4e39, 0x8, 0x80000000, 0x8001, 0x6, 0x9, 0x7fff, 0x8, 0xfff, 0x9, 0x4, 0x100, 0x2, 0x2, 0x7, 0x3, 0x2, 0x1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x61d, 0x3, 0x5, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x4, 0x8000, 0x7f, 0x3, 0x3a75, 0x7, 0x1, 0x100, 0xfff, 0x800, 0x0, 0xe, 0x47d9, 0x9, 0x3, 0x5, 0x4d04, 0x6, 0x120, 0x2, 0x6, 0xfffffffa, 0x9, 0x2, 0xf133, 0x0, 0x8, 0x3, 0xffffffff, 0x2, 0x0, 0x781e, 0x0, 0x4, 0x1, 0x9, 0x9, 0x99, 0x9afc, 0xfffffff3, 0x976d, 0x8, 0x200, 0x100, 0x2, 0x5, 0xfffffbff, 0x7ff, 0xf, 0xc7, 0x1, 0x6, 0x80000001, 0x2, 0x7, 0x8, 0x7, 0x3e268a1f, 0x4, 0x929a, 0x2, 0x2, 0x10000, 0xe, 0x4, 0x3, 0x7, 0x9, 0x3, 0x2255, 0x62, 0x8, 0x45e, 0x9, 0x9, 0x2, 0x2dc, 0x0, 0x10001, 0xec8, 0x9, 0x9, 0x2, 0xf79e, 0x5, 0x2, 0x4, 0x10001, 0x1, 0x5, 0xded, 0x31]})
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000002480)={0x6, "33878ece3ed0722983b73970f7e3bd819354d537842749a66d129fcf538215e048ba20f39de3441d8d164da66fd1207a9490b689907a32d03e4828ed6a4a9c2a"})
syz_usb_ep_write(r2, 0x6, 0x55, &(0x7f0000002500)="247c9b18d30e33cada1d48cbd9aa36b317e9b4e98510d630962608ffd3a9112ff57cc610cbfe87eb5565b7781d6420bbfcbf63194bc095ee346f30175eaa63c43227eb118613478a2314efb16cb4dc41c24e4d5797")
syz_usb_control_io(r2, &(0x7f0000002900)={0x2c, &(0x7f0000002580)={0x20, 0x9, 0xf3, {0xf3, 0xf, "d52fd064aabac700b55daf4c3cffff66d02a6f16f1ca68defd187e7f2b0e089ab0a72676749e5742a3ccd0946abf01bf1f399e274a343a533e3576c21eee5bf7e7b402880674c879837db865654204fa703291be4770fef8eea03334138ef0b989ff1f015d1c5ab73dfff8eb5b064e333ecd85c4b3dce67d8d17990a0e5d9dc07cd1850b91acf93393f0939304eaf2016fdfc40d6515b7d5ee7ef044868eee30cec60f17e4d0d4a56258f4c97ad91d2ed2ddc0c8c5019ce7d41fbe52d1238f8b11c10b3e7abeac35f4f0315abe240bfb2accdb37964621b7ef637a503a73e99d72707130b08c81bad552f508f1e9a8d176"}}, &(0x7f0000002680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000026c0)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@ptm_cap={0x3}, @generic={0x69, 0x10, 0xa, "6c7e77e729a3e31b467d9a3294954883268b53faeb06a16f6f6e115f45801c112b458081b1ade911b280ec949aa1311bc562ea14e04607387c1e2720288f9eab263b662a281e821d7739b1b82a8d4bfe1df0c88a2eb34c4072a257652ab54263321269dbf990"}, @generic={0x29, 0x10, 0x4, "2dd679f7a270f012b7f89607d27db6e8af13a86db4be5b221e783b98b8135d3e60fc0991d450"}, @generic={0xfb, 0x10, 0x3, "06eac6a36753dba4e529fe71362ab57e72abb2621be44e69f71e4cd06b9398ce5c320e1a98e1bb62e5e10562350cf840f4af06a551c2c70b39de0532395a48296fa72629d18da2f0d45d945e221ba6c92e9ec096ed0d49849ab585b06f3dd3cb93de848d3338fab5648055478cd11e63e94fb2fa74328e43e6b08f3880fdf5b797b55144428aa59eba81f5d5dfa086700aa8444f3917570695f9370c25a231594976e3f46913b9824274da668a607eaa7a2958840ccb02e4d3f1563d50af70499d00bc1c63c7aa908ae411fb8caea157cbfae0b27a23ddd2baf7a9795344a025a8d809544ced95fab394de878d00c6d43cd6224d3bf3a2ee"}]}}, &(0x7f0000002880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x1b, 0x1, 0x0, "c3da9dd3", "49b8a637"}}, &(0x7f00000028c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x0, 0x7f, 0x9, 0x7, 0x4}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002940)={0x20, 0x8, 0x1c, "c63e453a2bde87eb3737a259c6c3dc85a3a9aa94f9fd65cfadd1dd1e"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x2, 0x4, [0xf00f]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0xd5b8}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "f3da"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002b80)={0x40, 0x13, 0x6}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "0c9c"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0xfe}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002d00)={0x40, 0x21, 0x1}})
syz_usb_control_io$uac1(r5, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0x2, 0x96, {0x96, 0xd, "5ba6b421ef64da824889a11ecb0d94b7cfceec12b1a156430f524e9b355015ed1fbf4135626601da4f6aca89bd6a97a7e3c3c357e10765d124c805e9f2bbd72eb34c8e4350cfb0aea801930a19c5feec34362557c7d3616d8a1d853398f0a350388f73034b25f281ee3e13dc8883c53412af58271c40ab6080b4fc3bd53c76cd780d12b8732407805426115c2079a29cd621929e"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000003200)={0x44, &(0x7f0000002f40)={0x20, 0x31, 0xcf, "25ea09078acce2420fce1206c4c96e3e8e471bbb69e9e21eb8af4df4a0004ecde4fd3b6774a37c890cdf7b96f791c69adc17ef8d9ab1a379b9302ac66d4d557d178c013220f00f188f1b3745234f013a88b6b02dfd2b9922b0aacd5de370b944ea1b2057bc255f9c18bc5f8e148b86f1bc63d2077f3e35b0b15e72a7d7fddf2519611179ce6098015d46b35472489c44b41311fa2764e8ffb910b91e125eff9c879a5fbbb413627f26f1fee99ca4821cb21d93278ebd39610bc6c4f39b2322fc459dc13a08c823c3c2424ae39d02ed"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000030c0)={0x20, 0x81, 0x2, "b5a5"}, &(0x7f0000003100)={0x20, 0x82, 0x1, "89"}, &(0x7f0000003140)={0x20, 0x83, 0x3, "0e249c"}, &(0x7f0000003180)={0x20, 0x84, 0x1, '<'}, &(0x7f00000031c0)={0x20, 0x85, 0x3, "1a8a28"}})
ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000003280))
r8 = syz_open_dev$evdev(&(0x7f00000032c0), 0x7, 0x8200)
ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000003300)=""/157)
read$hidraw(r1, &(0x7f00000033c0)=""/128, 0x80)
syz_usb_control_io$printer(r2, &(0x7f00000034c0)={0x14, &(0x7f0000003440)={0x0, 0x10, 0x1a, {0x1a, 0xd, "3f757ed882ccbdb2563b3b5ca69f3e15ab27fbfb284c3461"}}, &(0x7f0000003480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000003740)={0x34, &(0x7f0000003500)={0x0, 0xe, 0x5, "12d3f64bd4"}, &(0x7f0000003540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000003580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000035c0)={0x20, 0x0, 0xf5, {0xf3, "0ea7c8008ef26143149635411a5e999376516de27c17dc4770e96952ab4f17d71ce7bc6f0b3a009eafd8addf705514d5405654f6056fd602c65aa939878bba6f8fb06aed6113a16edbb84fd616413658721232bc807c3d2b8ac49c91b5ad26bf58110332bb9eb34906c4e81045c9e2a86134390d071881f8c86bbccd9df2abfe793a7fa6772e7151fc01c9679dd77a88b1dd4921a7471cac3b86f21e033666e5fb559d141e05d750a187a0f552bd1377230f0913cea75ef3ffe304c91ab54afb118ca25b33676453ae60247f1db58015e6be8259f35e354f5a30268e16c469e43a96300386f52e7670eba6af97809e04b60ac0"}}, &(0x7f00000036c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003700)={0x20, 0x0, 0x1, 0x1}})
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000003780)={0x8, 0x0, 0x8, 0xffffffff, 0x0, 0x5})
ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000037c0))
syz_usb_control_io$lan78xx(r5, &(0x7f0000003900)={0x14, &(0x7f0000003800)={0x0, 0x30, 0x59, {0x59, 0xe, "b22acf731b83ba374d1311ac2bf283716ca0485220392af6ad14205c71d323ac8ae1153e88d078f004fd4a6b736c22fe591f87b302177d0722a4c97f2ffc93f4c11a7b011fb96aa66a4274c7b197cda6353468d35dc2c5"}}, &(0x7f0000003880)={0x0, 0x3, 0x70, @string={0x70, 0x3, "ce4f9e8329706ae06e7dd0d5bb0523df424a4d7871860336688d0364ee086270837dca935276a01802237f636a0069868e83cdab75be9003af8be076c50d76ba0dced656725474c9bf8af54919733bf94d3c05ddb3ba560ab6e48966873968364052cb5533cd89022b3467d2538d"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003940)={0x40, 0x16, 0x35, "d711fd192258f1ec1638a1679bee7d5f3ea6fe7ced37ce4488805ed9de3b2314f832b65d2ff63d9705c06c7a020eb56f92851a1e1d"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000039c0)={0x0, 0x8, 0x1}, &(0x7f0000003a00)={0xc0, 0xa1, 0x4, 0xc}, &(0x7f0000003a40)={0x40, 0xa0, 0x4, 0x40}, &(0x7f0000003a80)={0xc0, 0xa2, 0x2f, "9fc466298528f12223401bd467522fdb2e385abe368cb0f6ee5c37790ad684f29864981d415bc8f3f13125b104781b"}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac3-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904b1d02cff023000090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_ep_read-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0xc, @string={0xc, 0x3, "acf322afd3a694bf4b82"}}, 0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000338d19e40c6050592d77e01020301090224000172061006090400e802ff34bc03090501024000ff0d030905ca"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="e2")

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
single: successfully extracted reproducer
found reproducer with 25 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="0019e913d312"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0x3c, {0x3c, 0x6, "7ebc9747cb281ae7e94aae767197f9db77d1457ed10aaf2868c09bc647d5c172c3589d60833ca3ad62490457ea3e05befe81cfa749adb5a27c64"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x0, 0x24, "b3f0361f", "6264aa48"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x5, 0x7, 0x19, 0xff27, 0x6ceb}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x20, 0x1f, 0x79, "d79cf5a722281268664adbc8dc28fe3232d1b011d2097c152c0e19f1a4be96c8714c451040ba4ffcc17b92de1a035f63a0e0b946981e00989177446de68391f6545fe55f691c80b8a7cf7a47eafb5cbd43c3eab8716c4f5fa2853c82e2836acbd852873aded7256d599e3521548e4fc8fe3c834c212ed7df36"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "79ad"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="db6757ea7a13"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa60"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xfff6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]})
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x5, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x51bf, 0xd765, 0xde}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x8, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x80, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x40, 0x3c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="400904000000208a0dd572704bab96482671c36667bb95b6ca453d5abba265070718d66e85440a58982f43fd75b2b5776a402349f320373d691eb549a2221aff10b1243ecbbe203566b0daf5864a7165034b95f3c103baab89b41317d3fbc8e6a7ad75e125964f9aa649998f30f1e9fa09176ec586b46d678565979f7a537d789037eb3cb319965761706543a06eabb9cb8568a6fc7636520919359185c13a81eebc6d1425bf532e089874cfbda0186fb6b94bf426abd0a0a5d8ecbe276ee9a74c46d85cf7903db04dbdb4e47a484dd6b7408fb0b947c5ff6307e054e0008722d46bfe9acb47eddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xe}, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_connect$cdc_ecm-syz_usb_connect$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io$lan78xx-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x3, 0xe, 0x20, 0xf}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}]}) (async, rerun: 32)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_write(r0, 0x2, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
reproducing took 7h42m35.233134899s
repro crashed as (corrupted=false):
=========================================
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff88811c1ff071 by task kworker/1:3/5795

CPU: 1 UID: 0 PID: 5795 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 1656:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 1656:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811c1ff000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff88811c1ff000, ffff88811c1ff800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c1f8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3542, tgid 3542 (syz-executor), ts 128624767122
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_noprof+0x61c/0x7e0 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 sk_prot_alloc+0x10b/0x2a0 net/core/sock.c:2251
 sk_alloc+0x36/0xe80 net/core/sock.c:2307
 __netlink_create+0x5e/0x2c0 net/netlink/af_netlink.c:627
 __netlink_kernel_create+0xed/0x750 net/netlink/af_netlink.c:2024
 netlink_kernel_create include/linux/netlink.h:62 [inline]
 nfnetlink_net_init+0xda/0x160 net/netfilter/nfnetlink.c:776
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:443
 copy_net_ns+0x345/0x7a0 net/core/net_namespace.c:582
 create_new_namespaces+0x3ea/0xac0 kernel/nsproxy.c:132
page last free pid 3555 tgid 3555 ts 127755911558 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x264/0x650 mm/slub.c:5010
 vm_area_dup+0x25/0x7e0 mm/vma_init.c:128
 __split_vma+0x19c/0x1db0 mm/vma.c:560
 vms_gather_munmap_vmas+0x3a5/0x1670 mm/vma.c:1528
 __mmap_setup mm/vma.c:2538 [inline]
 __mmap_region+0x4c9/0x3150 mm/vma.c:2861
 mmap_region+0x3db/0x6d0 mm/vma.c:2964
 do_mmap+0x12b6/0x1c10 mm/mmap.c:573
 vm_mmap_pgoff+0x1f0/0x390 mm/util.c:581
 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811c1fef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88811c1fef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88811c1ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff88811c1ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811c1ff100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
=========================================
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff88811c1ff071 by task kworker/1:3/5795

CPU: 1 UID: 0 PID: 5795 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
 rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 1656:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 1656:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6499 [inline]
 kfree+0x20c/0x650 mm/slub.c:6792
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811c1ff000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff88811c1ff000, ffff88811c1ff800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c1f8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3542, tgid 3542 (syz-executor), ts 128624767122
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_noprof+0x61c/0x7e0 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 sk_prot_alloc+0x10b/0x2a0 net/core/sock.c:2251
 sk_alloc+0x36/0xe80 net/core/sock.c:2307
 __netlink_create+0x5e/0x2c0 net/netlink/af_netlink.c:627
 __netlink_kernel_create+0xed/0x750 net/netlink/af_netlink.c:2024
 netlink_kernel_create include/linux/netlink.h:62 [inline]
 nfnetlink_net_init+0xda/0x160 net/netfilter/nfnetlink.c:776
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:443
 copy_net_ns+0x345/0x7a0 net/core/net_namespace.c:582
 create_new_namespaces+0x3ea/0xac0 kernel/nsproxy.c:132
page last free pid 3555 tgid 3555 ts 127755911558 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x264/0x650 mm/slub.c:5010
 vm_area_dup+0x25/0x7e0 mm/vma_init.c:128
 __split_vma+0x19c/0x1db0 mm/vma.c:560
 vms_gather_munmap_vmas+0x3a5/0x1670 mm/vma.c:1528
 __mmap_setup mm/vma.c:2538 [inline]
 __mmap_region+0x4c9/0x3150 mm/vma.c:2861
 mmap_region+0x3db/0x6d0 mm/vma.c:2964
 do_mmap+0x12b6/0x1c10 mm/mmap.c:573
 vm_mmap_pgoff+0x1f0/0x390 mm/util.c:581
 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x119/0x710 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811c1fef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88811c1fef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88811c1ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff88811c1ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811c1ff100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================