Extracting prog: 14m16.289412533s
Minimizing prog: 1h10m6.953870404s
Simplifying prog options: 2m54.363077973s
Extracting C: 1m49.548499117s
Simplifying C: 0s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_open_dev$char_usb-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c00409045db9029793eb0b09050204"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r2 = syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2], 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="201704000040549b3e"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x0, 0x0, 0x4, "047e461d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000007c0)={0x0, 0x10, 0x4, '8U, '}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x20, 0x8, 0xf5, {0xf5, 0x23, "caeaf99e8c0ba1f27a74d62d55302f8a2a677eba9e574f8afdc9d0718ede83545206ccbae9f06200717c0cfa48ade8bd755ba4862d33b38d6023c513d48adadff774d35fe63a819498c9bec7e7655316a6ececf413421f8c2e05f0e451f17f2ebbfa77302f21bdd0e47efa8f00b66de98acb4fab6ff96816a1cc14ef46fa1efbe5a7ad48dcf83454cbd6be6ac943bc825392a09fbef58ae83ea27be36b8ba53df3a99a5ccc2ec40dee84c49bfb2785545a7b652587ef5d7fef6d61c46574ea74b649f5adf9653dac7043a0d9a77179ffcc36b7c66ee93f9598baeba5af1105e833c0d7918a5a8dca60115ed5ab967c9d4223fb"}}, &(0x7f0000000900)={0x0, 0x3, 0xf, @string={0xf, 0x3, "33b5c66e98b0dcd89f1a508900"}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000980)={0x20, 0x3, 0x61, "afdb3eb4772a4c240ebed670b4c9fc033405809d90b293132706bccb4588756ba8dc381aecdb01b143f3f16112172e8d09eeeb21743ac0a7d07fbbf262c2f7ef2015e213314a104a3d7b7767d5cd510e9dea481a1dfe42d979899929d5de64a641"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000a80)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000ac0)={0x40, 0xa0, 0x4, 0x6f}, &(0x7f0000000b00)={0xc0, 0xa2, 0x2f, "06cf4c7167f2915056d63c84564cd67bbb5ac62de0b1a37d46910e467ec52e7491441bf96bf09831c36bbff8c640d7"}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000e04000000943a7a"], 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x2, 0x36, &(0x7f00000015c0)={{0x12, 0x1, 0x150, 0x20, 0xe3, 0x5a, 0x8, 0x5e1, 0x408, 0x3e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0xff, 0x28, 0x9, "", [{{0x9, 0x4, 0x5d, 0x4, 0x2, 0x56, 0x23, 0x4e, 0x4, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x0, 0xa}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0xff, 0x10}}]}}]}}]}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac2-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect$uac3-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x75e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x4, 0x164, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x104e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x152, 0x3, 0x1, 0x0, 0x70, 0x2, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x54, 0x7}, [@extension_unit={0xd, 0x24, 0xa, 0x6, 0x6, [0x2, 0x1]}, @extension_unit={0x11, 0x24, 0xa, 0x3, 0x1, [0x3, 0x2, 0x1]}, @multiply_unit={0xb, 0x24, 0xd, 0xf2, 0x8, 0x6, 0xfff7}, @mixer_unit={0x9, 0x24, 0x5, 0x2, 0xa, "639f09e3"}, @extension_unit={0x9, 0x24, 0xa, 0x4, 0x2, [0x2]}, @power_domain={0xf, 0x24, 0x10, 0x71, 0x6, 0x5f, 0x9, "6091751a8873"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x4, 0xdb, "e592", "1b34f3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xaf, 0x3, "dc0f9e06395b"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x1, "4576c0233332d58e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x3, 0x8, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x18, 0x3, 0x6, 0x2, {0xa, 0x25, 0x25, 0x9, 0x0, 0xfeff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0xd, 0xc, "11f43afc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x1ff, 0x0, 0x85}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7e, 0x3, 0x5, 0xb7, 'E', "185180"}, @as_header={0x17, 0x24, 0x1, 0x10, 0x2, 0x1, 0x2, 0x3, 0x4, 0x3ff, 0x5}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8bf, 0x4, 0x0, 0x9, 0x1c, 0xff54, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x80, 0x6e, '/88n:'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xf, 0x3, {0xa, 0x25, 0x25, 0x30fb, 0x80, 0x7}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf9, 0x32, 0x8, 0xff, 0x5}, 0x1b2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, [{0xac, &(0x7f00000005c0)=@string={0xac, 0x3, "822caab3749068a501ff75b167fdb77ccad7d09e98f9895fc470003f415a08b41e594d288f3dbe29f35797185d10ebecb069d7c573ce14bcb4ec7b23cf7fb73ea9e907b4849168f6ea8180637801d6d84bee2cdcc72ded5d7aa9bcda2f03d2fcd3c416551511588bba030eaaa1c04f6e81c3af06349b69989987f800ea103aec88e0acc9a22e5718784e1083cefebc05a5d6ec14f6fcf8cf060fe8d395eb4734c60edc425eafe13fb787"}}]})
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0xc0, 0x4f, &(0x7f00000001c0)="68c371a89d3ad78df4511f4e84b11614e4fc43c56707f0853a7bbf6f3b6aa552b103e6f946d8deffc8b60026e8890f0b95b940466a51e654da0db21f2ea4ec8b39b61874da167c51fabda524b36612")
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$printer-syz_usb_connect$uac2-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040f003040040000102030109021b000101050102ff03"], &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1a, 0x0, 0x8001, 0x7, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x2, 0x10, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x977, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x40, 0x0, 0x1001, 0x3, 0x4, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9c2, 0x8, 0x7c}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x6, {0x8, 0x25, 0x1, 0x3, 0x0, 0x22, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0x0, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x1, 0x2, 0x0, 0x4}, @generic={0x3, 0x10, 0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x14, 0xfe, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$uac2-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_connect-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022041d00000432a52375b7bf18e8b1ac6f6778a6729374e2ea55f9b3cb59e5e3f954559d9aec3731d45042867f58dc62553c1e7cea2ecc898a93412e4961a0e508bd336545665586d416fdc2102741598d5829f002b08cd9269c43569c4457c92e4e716846a1757c0613dc7d500cd9"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x6, 0x37, "2ffc2dcd77c7e384294ab2f7be31be45696d70344cb80fb9e3ff3aaffcc48296a9a42fe03601a82e28da24aa2f169f3994c0d27d2ee801"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "8fd3b3"}, &(0x7f0000000200)={0x20, 0x82, 0x3, "03daad"}, &(0x7f0000000040)=ANY=[@ANYBLOB="208302000000c8f27dafb45a41b7e07ce282"], &(0x7f0000000280)={0x20, 0x84, 0x1, "df"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "3bbb57"}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2d, 0x57, 0x43, 0x8, 0x413c, 0x81d2, 0xe539, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x58, 0x2, 0x0, 0xe2, 0xa7, 0xc5, 0x5}}, {{0x9, 0x4, 0xa2, 0x3, 0x0, 0xff, 0xf8, 0x2, 0x5}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 20, 25, 25, 25, 8, 15, 30, 12, 13, 23, 22, 30, 15, 30, 18, 18, 30, 19, 5, 30, 20, 7, 7, 38, 17, 30, 11, 17, 30]
detailed listing:
executing program 1:
syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401ac"], 0x0)
syz_usb_connect(0x0, 0x56, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000010000000006241a000000142412"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d670009051157"], 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101ff0230000905010960"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x57, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902450001010080320904000003ff00000007050102000200070581020002000705820200020009040001"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xcb, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x2, 0x1, 0xc5, 0xf0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ')'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x20, 0x200, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x3, 0x0, [0x100, 0x0]}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x25, [0x69f7, 0x7, 0xddb, 0x4]}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0x80, 0x9}, @mdlm_detail={0x23, 0x24, 0x13, 0x0, "43c1d6e69698835e7cd1a85a601829de1896cf9da1fca1c33f7d01a3d5d56e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x2, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x7f, 0xff}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x0, 0xe3, 0x8, 0xa9}, 0x36, &(0x7f0000000280)={0x5, 0xf, 0x36, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a519f7976a1fe8227a46970db6451b78"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0a2f4d74a064363d7074da3f02195217"}, @ptm_cap={0x3}]}, 0xa, [{0xb4, &(0x7f00000002c0)=@string={0xb4, 0x3, "04b384eab38fbda354fbd905dee06c86fc3e36438ee4842f3957949116e89a8ae83f24c3f4c5b224591b9df79cef1cfdb850b7c5e66b178ffa365ea749f3a70498b19c98b8685d906ab04b912f2c37486d9533f3451133bcb03f85f188f9a6a80e78348c13a6493fa5ab81ed97fa6c0b5e044fca1367be09e31e0d8fd857ab9fdcd6745f28ee2fa9191f85c35f56498955df4e12c7e7fe2885fda7cf267e7d449b59d1a5dbd9318d207c976848002c0eb99f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x427}}, {0x3c, &(0x7f00000003c0)=@string={0x3c, 0x3, "b2abadd826570d70a23af71aee78d1f34004cadcdaebd626a2c400c4e05974aaf5f07899e50bad535456ea4fdaf37fc76ddb4c70f449edcd64ce"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3409}}, {0x84, &(0x7f0000000440)=@string={0x84, 0x3, "c68bb1d9ce3cd2391e6deb4d320ba0683c44acda39d4e65fd464c143cce88a0d3c4a55879865ae006084f726777aab6140722f5b3d25b6a256c679b46f2a11fe74e3c6d8875d7e7728683c1977ffc97ff2b97071c233eeedb4a074c2f0814260bc546139cef75cabe4caa9064b4f7cb1fc533c536af083f43010556c64f097b1a6a6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x9cd2}}, {0x27, &(0x7f0000000540)=@string={0x27, 0x3, "1927f6dbefd60664ffcc5ad316b0f75cb4f9920283c3ed3215202221f104ac12b0c0615320"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x418}}]})
executing program 1:
syz_usb_connect$uac1(0x6, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x7, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x90a, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x4, 0x91, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x5ff, 0xc, 0x4, 0x0, {0x7, 0x25, 0x1, 0x4, 0x5, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x5, 0x3, {0x7, 0x25, 0x1, 0xc, 0xa1, 0x6}}}}}}}}]}}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c04a10109", @ANYBLOB="2921783775be5c102ec8f7bffa8f5f", @ANYRES32], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x1, 0xfd, &(0x7f00000003c0)="bae5c93010461f346d9435c28baa3424463913ed4db6644d80d3793eb5c320da2657f0bd2b7b62f56d23ee6a8c6230ad83d08edf1d39dda57527c05538e3db9e560b1c19f43fc1a4f5e2fb46f54c65cab8110d792de8119f8916c671230550f7a267bacc748cb3aa25d982443ccdd447a3768704404110ed47c241a8201a5b07057e9ff3e25bd51a3874de72775ad57177f12e3be244c555d072537589bb487ad379cabdc04d6f5d6cce2635e48770a78c05743f2b433db4b3a5af4c972a0489f4bd1d72c4fa8360ca6e5aa66864f75e46abcec75ad7288c11c026a083ae54b2de952372c369a22a11c2b32e305d117b252ee2bc6573d870a74aa17086")
r1 = syz_usb_connect(0x0, 0x57, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x75, 0xfd, 0x1c, 0x40, 0xeb1, 0x7007, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x77, 0x9, 0x10, 0x3, "", [{{0x9, 0x4, 0xca, 0xe7, 0x1, 0xff, 0x0, 0xff, 0x94, [], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0x6, 0x3}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0)
r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x62, 0x4d, 0x41, 0x40, 0x2040, 0x7500, 0xd883, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xd8, 0xe8, 0x1, 0xed, 0x71, 0x7c, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201100100000020435522050000000000010902240001000030090904050afe0300010009210500050122280009058103ff"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000a80)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20044200"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x110, &(0x7f0000000200)={[{0x109, 0x4e00, "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"}]})
syz_usb_connect$midi(0x5, 0xbe, &(0x7f00000004c0)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x1, 0x3, 0x80, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x9, [@midi_out_jack={0x19, 0x24, 0x3, 0x2, 0x7f, 0x9, [{0x87, 0x1}, {0x4, 0x2}, {0x10, 0x4}, {0x7f, 0x7}, {0x4, 0x2}, {0x9, 0x9}, {0x0, 0xf8}, {0x0, 0xe}, {0x85}], 0x4}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x80, 0x2, [{0x5, 0x7}, {0x10, 0x7f}], 0x2}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0xa, 0x4, [{0x3, 0x7}, {0x9, 0xcf}, {0x8, 0x7}, {0x0, 0x5}], 0xfa}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0x4, 0x80}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x40, 0xf8}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x8, 0x3, [{0x81, 0x3}, {0x81, 0x9}, {0xff, 0x5}], 0x6}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0xc, 0xfb, 0x9, {0x13, 0x25, 0x1, 0xf, "8a1c343e3e4e57ac591c0dba86e535"}}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x6, 0x4d, 0x0, {0xc, 0x25, 0x1, 0x8, "9e0e33527d472389"}}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x0, 0x0, 0x0, {0xd, 0x25, 0x1, 0x9, "99482380f76e7fe44b"}}}]}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x5, 0x2, 0x1, 0xff, 0xc}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x9, [{0x79, &(0x7f0000000600)=@string={0x79, 0x3, "2f4017ca822a11daae6d08d0c21b121356e26ac3c47dcd3f8a548a123f5a8b884846154b84e3624b003794482376721c87f9d746bcf1b887ca27c5d5b6a5a5da7f282580309753cb6ceff68ea09ae1dd7a21f2a3208534c619a0262a780fe925daecbb66da0ee4c9663f442074a35504b772eeb03a774b"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2051}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xe4fb0c9af080da5f}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x43f}}, {0xf6, &(0x7f0000000840)=@string={0xf6, 0x3, "98d64ef2b75ce838ad01be7b438bdcfc2c38f7d5ec7b4376de33b776f28b6561d037c294f6adb8a1cfaf3e5532ba6150858a5f5761ce6e130a9a3953e5d7f721c3527f84161956e3ad85ee7efebd57db94b0fad9c3625e9fef17f0ed64ff420719393509f41d73cfd0581436c8c8963a75ed15e777ca43c8767e5ae680cb8310be29746d46ad1f7042391ac45806ee10327174af692e07d03da41df18c8ce8f9f1d5f495c6f339a01f10202144bbf526ccd05f61b9bfbf41238f976a8f3caa81fa5063c5e4f0b83bf248c90530855462c6593f000872e642bfffd3917f7f24d81446a6647bbd3a5fd3c9596c54119e3c0c947b0d"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4ff}}]})
syz_usb_disconnect(r2)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0xf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00032700000027035d8261f2b0175456d23205003f028bd165ad066d2f2e2037a11dca54f48e6c139d7fc204985ec0b5817b445255935e26b000758d98af480e6d2198d4b3d1b8d454222f896d1819364e8380cafdb51394c7a91a15f2b3865756c653314ed905167dde6cd43fe99563a1b74b0c34aaba11604ed3e9b1538b4dcde443e2d3677a95bacd01f7fd39e0f4c37b96d1961bcf0b252dec96d606db"], &(0x7f0000000600)={0x0, 0x22, 0x1e, {[@local=@item_4={0x3, 0x2, 0x7, "1d949a95"}, @local=@item_4={0x3, 0x2, 0x5, "8fa51a96"}, @local=@item_4={0x3, 0x2, 0xa, "0061d26f"}, @local=@item_4={0x3, 0x2, 0xa, "8e31530a"}, @global=@item_4={0x3, 0x1, 0x4, "bc37fa97"}, @global=@item_4={0x3, 0x1, 0x5, "16476d90"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb1, 0xfb, 0x1, {0x22, 0x280}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x20, 0x17, 0xf5, "1f644a339c189f0ef7bd83b22c71300575186131960246cb53468d8c3a22bdef13f26343f4a5732382a8622922702261f41fe95ee387aca2350d9f1bfb4e2d2bec5166aaf7a37ee8d287ee556b68ef66649a3a6fe2574f2a6a96a2ee3ee1be1932e7f530686d027cdba0855a3b85e17120fcd6be82ddbd42f2afd762ea85a10cd40175b4c71d4e3eee6df2268491ceef7f26f9db574445aa27d0d909327dfd6b2c338dfa343d49bca5b05c1742202dd73c68b5707950f87288c43b3b7e82af081130d38311c94fb07bce26379422c09fc9c17a122721ade74328f8c6633df8c6dd074350e923214d9c018cecbdfb8c483536691d15"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x94}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000840), 0x0})
syz_open_dev$hiddev(0x0, 0xa, 0x62080)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000f00)={0x14, &(0x7f0000000e40)={0x40, 0xd, 0x69, {0x69, 0x21, "898730a2de314c7f5367f42ca243b460ac6ce8411dbba3e849ef85e0744d6fbd9d5c5d62c55b7de65fd3f543733ce864cf18fb43e736d93cbdf9aebb9305a098136f0e72967ca025deb554301c411dc9a1f30d08807adc81a9a973e4f743096923023b923280d4"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000f40)={0x20, 0x12, 0x69, "84451605ab801eab784b4cc6f42e176809a317f84301a927e83879c891dc170910ea4fdaf720b14d73f3091389e82b3f5e78d2a6053ae39a9cb18ed3c35d394be0b1a29f7df89e0feea9200a331d9f1bfbe9a955990ea59876c2be5bea9993ed305f1f365a32a959b7"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001180)={0x20, 0x81, 0x1, "8a"}, &(0x7f00000011c0)={0x20, 0x82, 0x2, "efaa"}, &(0x7f0000001200)={0x20, 0x83, 0x2, "5492"}, &(0x7f0000001240)={0x20, 0x84, 0x4, "8efa782b"}, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000b00)={0x14, &(0x7f00000009c0)={0xfaa965413f968360, 0x0, 0xd5, {0xd5, 0x24, "fd5fd9e2bf5d2cd7b43ad3e8286b309c22dc64c394af893b2cd1a4d0c93f8392ddf46d51533146968aa95216383dc911d2118ee269b13e590fbff3beba290f6c01b411066f48990c1dbe3642c138e0574d0a6e39f992249dc5b96939361388810bfedd6e565f38b2c86e09ba1d6efd949603c145ebec4ead1ce1d798ce2e8006b5d1d169c17621e7187d8a1da8daebb3ea23337daba2ab5161c70cf7367a1bfd779352ea61370294310b2d6d33c3b3b0c2f84840de04ec024d69d2192060f36be8475b3aa483d0d2830e9a379f415d009e2f92"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000b40)={0x0, 0x15, 0x76, "c21e3ac2e3134c60b6925eb11c7a5c440ef3ea270bf2848f8dd9c748de43093bfffc65fab57dca16588d7bbe115fa476628305c9a854f80392066401a6f5d22dab2a2c5181316ddb02e222d6cf3eacd7e3778ceaf640e084dec2c4cc154996b66e2ffb42b3ef6812930c81766c8d3d9d98af881095c3"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000c80)={0x20, 0x0, 0xda, {0xd8, "26093d6455dedab68c4d4fafaa033422264e3dd971e782649fe33a8a20f5c55eddd4eaa14238fbb4c3cf445884b63bd740431675ea530c4c92bafb5a054b16d5642e95c6f15e762cc7414bf2a7a2160a051717825c22207fc0fa8254843933105709271c92508825a64129035d174c9157ea585a0ce6bb2d641f4725c0f20ef048f71bc7f2ad85062bb0cf5cc1ce6beec5eb0923939549d640421bf3bfe0908613e5e664b3a9aba835aa51a61def8dbca91a18badbf8686938ca6f92b5fa5837bf2f5fa9cd1f36a8216c350f4e4025c92909ef0f5ee7a879"}}, &(0x7f0000000d80)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000dc0)={0x20, 0x0, 0x1, 0x8}})
r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x5, 0x40500)
syz_open_dev$hiddev(&(0x7f0000001340), 0xee, 0x40000)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0xf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00032700000027035d8261f2b0175456d23205003f028bd165ad066d2f2e2037a11dca54f48e6c139d7fc204985ec0b5817b445255935e26b000758d98af480e6d2198d4b3d1b8d454222f896d1819364e8380cafdb51394c7a91a15f2b3865756c653314ed905167dde6cd43fe99563a1b74b0c34aaba11604ed3e9b1538b4dcde443e2d3677a95bacd01f7fd39e0f4c37b96d1961bcf0b252dec96d606db"], &(0x7f0000000600)={0x0, 0x22, 0x1e, {[@local=@item_4={0x3, 0x2, 0x7, "1d949a95"}, @local=@item_4={0x3, 0x2, 0x5, "8fa51a96"}, @local=@item_4={0x3, 0x2, 0xa, "0061d26f"}, @local=@item_4={0x3, 0x2, 0xa, "8e31530a"}, @global=@item_4={0x3, 0x1, 0x4, "bc37fa97"}, @global=@item_4={0x3, 0x1, 0x5, "16476d90"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb1, 0xfb, 0x1, {0x22, 0x280}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x20, 0x17, 0xf5, "1f644a339c189f0ef7bd83b22c71300575186131960246cb53468d8c3a22bdef13f26343f4a5732382a8622922702261f41fe95ee387aca2350d9f1bfb4e2d2bec5166aaf7a37ee8d287ee556b68ef66649a3a6fe2574f2a6a96a2ee3ee1be1932e7f530686d027cdba0855a3b85e17120fcd6be82ddbd42f2afd762ea85a10cd40175b4c71d4e3eee6df2268491ceef7f26f9db574445aa27d0d909327dfd6b2c338dfa343d49bca5b05c1742202dd73c68b5707950f87288c43b3b7e82af081130d38311c94fb07bce26379422c09fc9c17a122721ade74328f8c6633df8c6dd074350e923214d9c018cecbdfb8c483536691d15"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x94}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000840), 0x0})
syz_open_dev$hiddev(0x0, 0xa, 0x62080)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000f00)={0x14, &(0x7f0000000e40)={0x40, 0xd, 0x69, {0x69, 0x21, "898730a2de314c7f5367f42ca243b460ac6ce8411dbba3e849ef85e0744d6fbd9d5c5d62c55b7de65fd3f543733ce864cf18fb43e736d93cbdf9aebb9305a098136f0e72967ca025deb554301c411dc9a1f30d08807adc81a9a973e4f743096923023b923280d4"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000f40)={0x20, 0x12, 0x69, "84451605ab801eab784b4cc6f42e176809a317f84301a927e83879c891dc170910ea4fdaf720b14d73f3091389e82b3f5e78d2a6053ae39a9cb18ed3c35d394be0b1a29f7df89e0feea9200a331d9f1bfbe9a955990ea59876c2be5bea9993ed305f1f365a32a959b7"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001180)={0x20, 0x81, 0x1, "8a"}, &(0x7f00000011c0)={0x20, 0x82, 0x2, "efaa"}, &(0x7f0000001200)={0x20, 0x83, 0x2, "5492"}, &(0x7f0000001240)={0x20, 0x84, 0x4, "8efa782b"}, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000b00)={0x14, &(0x7f00000009c0)={0xfaa965413f968360, 0x0, 0xd5, {0xd5, 0x24, "fd5fd9e2bf5d2cd7b43ad3e8286b309c22dc64c394af893b2cd1a4d0c93f8392ddf46d51533146968aa95216383dc911d2118ee269b13e590fbff3beba290f6c01b411066f48990c1dbe3642c138e0574d0a6e39f992249dc5b96939361388810bfedd6e565f38b2c86e09ba1d6efd949603c145ebec4ead1ce1d798ce2e8006b5d1d169c17621e7187d8a1da8daebb3ea23337daba2ab5161c70cf7367a1bfd779352ea61370294310b2d6d33c3b3b0c2f84840de04ec024d69d2192060f36be8475b3aa483d0d2830e9a379f415d009e2f92"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000b40)={0x0, 0x15, 0x65, "c21e3ac2e3134c60b6925eb11c7a5c440ef3ea270bf2848f8dd9c748de43093bfffc65fab57dca16588d7bbe115fa476628305c9a854f80392066401a6f5d22dab2a2c5181316ddb02e222d6cf3eacd7e3778ceaf640e084dec2c4cc154996b66e2ffb42b3"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000c80)={0x20, 0x0, 0xda, {0xd8, "26093d6455dedab68c4d4fafaa033422264e3dd971e782649fe33a8a20f5c55eddd4eaa14238fbb4c3cf445884b63bd740431675ea530c4c92bafb5a054b16d5642e95c6f15e762cc7414bf2a7a2160a051717825c22207fc0fa8254843933105709271c92508825a64129035d174c9157ea585a0ce6bb2d641f4725c0f20ef048f71bc7f2ad85062bb0cf5cc1ce6beec5eb0923939549d640421bf3bfe0908613e5e664b3a9aba835aa51a61def8dbca91a18badbf8686938ca6f92b5fa5837bf2f5fa9cd1f36a8216c350f4e4025c92909ef0f5ee7a879"}}, &(0x7f0000000d80)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000dc0)={0x20, 0x0, 0x1, 0x8}})
r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x5, 0x40500)
syz_open_dev$hiddev(&(0x7f0000001340), 0xee, 0x40000)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
executing program 3:
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1], 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x400000)
read$hidraw(r5, &(0x7f0000000180)=""/54, 0x36)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xd0, &(0x7f0000000180)=ANY=[])
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x60, 0xb1, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_connect(0x3, 0x81, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xe9, 0xa1, 0xcf, 0x0, 0xbda, 0x817a, 0x2896, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x7b, 0xb6, 0x30, 0x7, "", [{{0x9, 0x4, 0x8e, 0x2, 0x2, 0xff, 0xff, 0xff, 0x2, [@hid_hid={0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x41f}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "e96ff1c38a32"}, {0x5, 0x24, 0x0, 0x47}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x1, 0x25}, [@country_functional={0xc, 0x24, 0x7, 0xf8, 0x9, [0x1, 0x3, 0x9]}, @obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x5b, 0x7, 0xfe, 0x9}]}], [{{0x9, 0x5, 0xb, 0x10, 0x220, 0x4, 0x58, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}]}}, {{0x9, 0x5, 0xa, 0x13, 0x20, 0x5, 0x5, 0x1c}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x80, 0x4, 0x6, 0xff, 0x44}, 0x74, &(0x7f0000000400)={0x5, 0xf, 0x74, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x6004, 0xf00, 0xd6, [0x0, 0xfa0e10684d318e22, 0xff3f60]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e2c2216bbd13b13d67ad7a20a48670ac"}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "9e4ab39611fd00000200"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x8, 0x81, 0x35da, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xa2, "a07b31d45619ed1de466db848500a789"}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0x5, 0xff00, 0x6, [0x66bc00595c3b99a7]}]}, 0x4, [{0x4b, &(0x7f0000000480)=@string={0x4b, 0x3, "dfb591da56f760ef90a6576d82a43e109a3b73e6108bf6e9cb62baa30070bb1d159ee74026805ad50e52cef2acd4ab1434001d71ec1426e784990f72be19c258b5bc9105d7acad885d"}}, {0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x480a}}]})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, &(0x7f0000000280)={0x0, 0xe, 0x1f, {0x1f, 0x4e6db44defbb05c3, "e8d264ded32cd3bbe95bcf848ab4a82e323b8b47831ea027e6e9630558"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x44c, &(0x7f0000000e00)={[{0x6, 0x4e00, "b74e7cd89ec8"}, {0x76, 0x4e00, "181983c2d140c6ca84622297093da92a24e0c645960daf1eb9df3ae12f42db138e5800b1441a9144278eaa79282921b88f03ab8de9364507e4f7dedbf788c78546021a722c7ab676217da6fd66e39099ab5a6e1cd1e1313ced505f9a978ab10279dbf95bf434bdaf8a5b78505031c08cbeffbab7b99d"}, {0x10, 0x4e00, "27352ae93ae4af0ae3cd3da2ca55daa7"}, {0xe0, 0x4e00, "355b76f10bb94c1c8e0f5e507edd04dfbeaa614632e964552c60e1b5ba155d8ad66ad63ce5991eac16b387b64671d96cc70b26c8be420c81adb2db13b9a51bc59d5e252bd5e7396da43657bd034cf822584482d9c88cf5a510c64bcc0d6b32019e92f3900e9fd0a79ee8fc0efbc33526a89c6c902f0f7f2f66273723f88b0e1f2d6d976c73f49d0fed816590e203382907ab10d11be74a8f1ae86f911452f82de0d25e554c979996278c84c8d133a45a8eca180deb87bd17c6055851607ea391c1800d8bc6bcaaa002e02d096142ce24e279ff94df3f3ba802306d26a46be732"}, {0x7e, 0x4e00, "3f4a28678c10d5da4eb14d28fd6e4ec36104d437aa16b858da5298393f424c8f8a5d15a8d065c7c0934c02969f7ed2b8d32a6329e40bf07c4497e29883cfb07e13558e50db280197d6eb39c5eb1a024562aef1b2cc66afb170745af9296ebc41e57b2a044bfca97949ad2287ded2bb316fe32025e984548ce338cf2662a7"}, {0x6b, 0x4e00, "4046c364c3f9a15a010e8c3d07c5e55135fec739a62d2a6531431d73d76502e5a7af767029d102912fd3e20ef7feeef678466f50a447d8be7447654b501ba999e6974177a0d67ef9b760e59b87c8c248f517968e44ba888ea8150de3f6a5782bb7e9ea19b910b6a234c557"}, {0xcd, 0x4e00, "206a60493201dfd52d62d420f4d4e5a4f1bcebb7a8bf032002ee983d1d445d4b2213c7c01a5eb6bf8cc11af4dff674b7a7e877ec82bd643b55a3a18f1f5a7c311d1e441751e25baaebd7f33a49c22413457c399b63c40e845327c25d75d4d0e9e3694809c458072bd584f5cc949bc320646a5277233ab0b1871d684eba85812e5357f62594850ed1889f73cf24543268132d31237b9c6c417893b2dc6116d305205164b1732f27baef5a830fbb24eac8dd2fbc8e1a98e5e6bde1b11c78b4f6df9e7028ae65f183f1d684dda5e9"}, {0xfe, 0x4e00, "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"}]})
syz_usb_control_io$sierra_net(r4, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x40, 0x1, 0x72, {0x72, 0x30, "f3688193189bfa78618fd4c4047d1ed6a39c8be069dbae8206c93df64d1344f1670973b386360f114f9c9b06734fb723448778a07c7235f5f460ba4416b2fdd6adea7a1dbc0a3bd69d6c0838437d66bd6c2828d8d9fb29902ddbd4bed2fcc6f2ff29f84e818f38cf3e19ab53329a47f1"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000001700)={0x1c, &(0x7f0000000880)=ANY=[@ANYBLOB="000ff10000003cfba389e0648d0df4d243caea16fde83a3a3217b41943ba816471c911f85784c73f9eb38a321430ef6bf914f25a09a01f2d57b39973609be416c4405bc7f59830e5783ed5ae6de911e369a1cff4ebb1d764293d0683cb7d6c6155c742fbbb29160794087783e7383d9baeb61d28901e0460af8b1aea265664dbabe0699e72e9d4558e7da2710b767f834ccb96a8c25a2d67c4b02f787f01c1d92b65a26fb20e4afa2b34643f97ce14a3fb9ca1ae186e4dbfaccce3b0f92213b8450840eb7d6237fc92046563cc6c73064d97466560083cae35aae162cec2d0c6585c5085cd736170052b2db983ca192c3822b40cb57463"], &(0x7f0000001280)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000016c0)={0x21, 0x0, 0x3, "bfc663"}})
executing program 2:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x80, 0x2b, {0x8, 0xb, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xb0, 0x7f, 0x1, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x2, 0x7113}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x6, 0x4, {0x8, 0x25, 0x1, 0x82, 0x30, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xe8, 0x0}, {0x3b, &(0x7f0000000240)=@string={0x3b, 0x3, "cd49756647669d90d6638c755d22e62525f402e4915dc176eae010bfc7218cef492f5552742c6900feeae0578ad443bd30c21a9af129a76b44"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80c}}]})
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000040000000000904010000020d00000904010102020e00"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3, 0x2})
executing program 1:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x9f, 0x1, 0x3, 0x1, 0x2, 0xd6, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x67, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0xc5, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500200000008630731104000010203010902b3000301011000080b010201ff20080904000000010120000924464a92f1c4010900084d000111240702000006030003000200000001000924080101020003001124070402000301000000000002000000102402010504060afc080000000a09f609240d0600000501006cf7672849c22b3d0009040101010102200009050109000252288008250181000b0700090402000001022000090402010101022000062402010480090582099077000101082501"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f0000000240)=ANY=[])
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001a40)={0x24, 0x0, &(0x7f0000001980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000003100)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c00000015b6a4b3c081502bdb50c852f6ea19949a4d742bb01b57e0db4edf6fe7f511b25c8fa4b88890f223365582b42ed7497f82de14e08ba21d543a3ade91402f3a42b440bd318966cc80ec39da1516a8058af91ff4cc7fdf195a15278af5f3924c1fe49bb916714b45f71be33911193e10e2360f6f75f6797fc7f716fd50aa846be76fac85fc3dca751d6bb8799efa895e2e6b28b4f3a8edf74f1158636ca04dba376324cdbe"], 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x57, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x50, 0xfff, 0x560c, {0x636, 0x5d6}, {0x20b, 0x6}, @ramp={0x8, 0x2, {0x8, 0x401, 0xfffc, 0x1}}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="00004500000045003b651763da2333ddbb3c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc343, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x6, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x1, 0x6}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x3, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902270001010080fa0904000003ffffff0007050102000200070581020002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_read(r3, 0x1, 0x40, &(0x7f0000000240)=""/64)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x64, 0x46, 0xa5, 0x10, 0xb05, 0x171d, 0x1a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xcb, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0xca, 0xb, 0x0, 0xb0, 0x68, 0xb5}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="05"]})
syz_usb_disconnect(r4)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0xa4, &(0x7f00000004c0)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0x20, "f58d063ab8ce99f11784f1e2a489e3da7a27846eeef2b20e656fccea3b63ed46"}, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x6c, "5ff282edc9e19d8e35e85e2c79cbbf149ba5ae828653d55911cfb22c0b17d1e748d036f451d5ca955fec5eed1116b86b907387a977e1d67314580e1c5b45df3f615cb2fb60823e0f935c52d2041dc28b344eec64b2d6a83dda4121407a953e280561a99e1158d34063fa43a2"}, 0x0}) (async, rerun: 64)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003fffff700070581020002000705820200000007050302"], 0x0) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xff, 0xb, {0x7, 0x25, 0x1, 0x4, 0xb, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa, 0x4d, 0x4, {0x7, 0x25, 0x1, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r2], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x61, 0xc0, 0xc2, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8000, 0x2, 0x9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x0, 0x18, {0x8, 0x25, 0x1, 0x1, 0x33, 0x3, 0xe49e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x8, 0x2, {0x8, 0x25, 0x1, 0x3, 0xc, 0xe7, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x84, 0x87, 0x6, 0x20, 0x5}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0})
executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000680)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000007c0)={0x2c, &(0x7f0000000800)={0x20, 0x30, 0xa, {0xa, 0x9, "8a9eaf47174975b0"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000880)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f0000000a80)={0x20, 0x31, 0x85, "f57839c73ae98c011381705c01713fadd9189faca1d1ec96e010b80f2b2ac5e4648dac3ece20eede47360336b29d04efd80bae3861fc01f0a07caab8872b0e7b3e783be3351fc160a960ea6af062da03f4e0e3aa427efe10f2f862e65688cc4591b7ed7ec3b9f1e2ba37d3abe99b8d45384ce76452a99f1a4a88785c4a6b55d3689355b302"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xad}, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xff72}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x33}, 0x0, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, 'TV'}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0xea}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xe0}}) (async)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3f, 0xa0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0xe}}}}}]}}, 0x0) (async, rerun: 32)
syz_usb_connect(0x2, 0x50, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xb7, 0xa4, 0xee, 0x40, 0x4dd, 0x8006, 0xba57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x5, 0x7, 0x60, 0xd5, "", [{{0x9, 0x4, 0x26, 0xff, 0x0, 0x2, 0xa, 0x0, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x74f4}, [@mdlm={0x15, 0x24, 0x12, 0x6}]}]}}]}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_connect(0x1, 0xfffffffffffffe7a, 0x0, 0x0) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa, 0x90, 0xf7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "71a110a5d168"}, {0x5, 0x24, 0x0, 0x1146}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0xe524, 0x8}, {0x6, 0x24, 0x1a, 0x93c9}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x6, 0x6, 0x40, 0x5}, 0x5a, &(0x7f0000000100)={0x5, 0xf, 0x5a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe0, "5b4219ac7c0d4cbdce4ea666f5d4a20a"}, @ptm_cap={0x3}, @generic={0x3b, 0x10, 0x4, "d41b9c4dccc1da90b33cd1f61def583901a8dd823c28b6f3d3e5c065adad26b11b6a92a36598a07bc7b6228cd9039eb595235bf3f95af6f5"}]}, 0x5, [{0xc, &(0x7f00000001c0)=@string={0xc, 0x3, "eb81e3996d6b1ab17f11"}}, {0xd9, &(0x7f0000000200)=@string={0xd9, 0x3, "9d0d1ddd4cb165a4502d055138ae5b3d83453b15f6eb9b803bc5e6b4b485045a8b95461f4627c168ca68bf2483daae8c92d527e850d80d60bb3621b59d18244b6800d18ef038d046a6f4db65189bbd2b452f2f7f587d59807c34335d12c83acf6760048a151631be47256ec7e745fd2ffc33c1170aa686651fe12b1b3605669d94c96b35521e2dee252390ffaefdf272245282569c9a0ab94160228765c9025c66477121b16b9a4b55ae0ba82b8792feef465b4c0a2f5a07cdd6587a3e52ad7b594248e7b90728643837c55697b8cf46ce08d38b3f6045"}}, {0xc1, &(0x7f0000000300)=@string={0xc1, 0x3, "cfb3e6c370264d57bb3398c3fe0443a9ed3fae981646ad7b928fce969ca93ec5e7d3aa5b27e85f3fe70a0e7bbf83e75c65515d5a8a769b8c843299d9e20b6eeaaf3aeea8c1d67d6b28e17446a98add919c5e9baeba99fc3317c6807e36c36ce2f725d674403d2bbfde16c36262a7303a5894619133634a796a51332e5e33723dc0ff1aa51a1e9499bcbd2f44eee8cb293a14a6af887ad75778f740e82ba570f6c8ddd0fd22d4e16cf723e7c7f589b10803a49eb060a3f23a9bb52e55605a3b"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x423}}]}) (rerun: 64)
r0 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect(0x3, 0x68, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xdb, 0x46, 0xc5, 0x10, 0x4c8, 0x720, 0x4c06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x2, 0x3, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x69, 0x2, 0x0, 0xfb, 0x65, 0xbc, 0x8}}, {{0x9, 0x4, 0xa4, 0xe8, 0x1, 0xe, 0x1, 0x0, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x29}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x7, 0xa, 0x3, 0x9, 0x3], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x1, 0x5, 0xe}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x4, 0x1}]}], [{{0x9, 0x5, 0xf, 0xc, 0x8, 0x10, 0x7, 0xf8}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000e40)={0x40, 0xe, 0xda, {0xda, 0xe, "8ac811f7ffac18cfc0bf64dcebb2f0d2d1c68ca4714de36bacfddc72890372e5e8683d41b2319f823c8f3148f93f65e2cbd7376d0261768305990f071ba7cedcfda33d55874fb7a4af38ce7b02dbaf0891d858c11ccaae1b968f46102ace3fd362c04ee6faecc1ae5ea05d84b3f1f3d9bc2067bdc00108d03bc4f0f9c9d0e4ab13b5da743addc5c9c4a9d88fca4e34e5dac3fe7468c25c6df99ee7f4e76639df4aed29cb4103b1e4feb996cdbccdc119a7ebaaa1fe099b490967e64a2e5197e381b92369fcac9c34a6995b08bc78805419c935965a5945b2"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000001180)={0x2c, &(0x7f0000000fc0)={0x20, 0xd, 0x86, "ab5a679de0bb5aa13b5da2380a23ae214bdeb09b774767685b87fd8c1049ee316ee25e68756320591a93f5c94bd92df00459f154b9c6a61eab68d9898d2a7101e98d2e62c14f30dc661e47926624890caee59c8fce05962ef477fecc5870880411df4e3f25caa21f94d1bb05bdc72b01f9060caa192eeed884f41bdc60a15a0da0578724a920"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x78}, &(0x7f0000001100)={0xc0, 0x5, 0x4, "e17a3bdd"}, &(0x7f0000001140)={0x40, 0x5, 0x3, "4130ee"}})
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x318, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0xd0, 0x3e, "", [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x3, 0x48, {0x9, 0x21, 0x8, 0x77, 0x1, {0x22, 0x8fae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x64}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x5, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110038e3ac6209429010013780102030109024600020e06000709800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0905090340007a0a84"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200033010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000580)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000d80)={0x40, 0xf, 0x4, "0240cc30"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x5b03, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0xff8fb3b8b0127112, 0x15, 0x8, "4e8790febbaafb38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x18, 0x70, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x0, 0x7, 0x1, 0x3, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0x6, 0x5, 0x7, 0xff, 0xaf}, 0x155, &(0x7f0000000c00)={0x5, 0xf, 0x155, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x7fffe00, 0xff0f, 0x180, [0xff00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xf5, 0x2, 0x0, 0x5}, @generic={0x103, 0x10, 0x1, "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"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x1b, 0x8, 0xb7a7, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x8, 0x7f}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x6eecf60, 0x0, 0x2, [0xc0, 0x0, 0xff0000, 0xff000f, 0x30]}]}, 0x1, [{0xf6, &(0x7f0000000680)=@string={0xf6, 0x3, "1247108ce94ed6802f318dcdfbe984a6880e7c9928ce33c9c2031d21e73f20f5eb2732a193082e4e02748e1baefcff5bc1947f2bc368b21dd18bf50e9a512237de85f066d20f083e2a292eba5ec3d9a46584de52800d1d3a600d2743389a8f9d3cbd49f56bb59f114fb44c8380ce3945f6aa4c1ee3fc73cd638fefd06f3bdfa418e08d73cd6720d57a666dac3983bd61b1801037bb132fbd6b0d3917313d49c57f54c50d0aa17e4d3f70cba117c8c425bad5e4b4705b22cacd1896a1c522408bf6927c7c7c9c3416b7e3b41c7d968e20978fd2c3cd13e9e0a5e5d9cf0dc2685ce780068c1c02c53f4b2f5df77bff21c6947fa2a9"}}]})
syz_usb_control_io$printer(r4, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x5, 0x63, {0x63, 0x3, "655466419cbe0d7be5eaa8526a40b6697ce3ece1d435f5645adadba9cedddfca2ee99089cda7d897fb36084780ef7d1c424941b895be784796a8a8ca764eab8f30bad5a251fd6941af44e4a69349632d012b7c6b8711b5a6aa1ae8e0de48939d7c"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000b00)={0x34, &(0x7f00000008c0)={0x0, 0x0, 0x20, "8acd87736533d84722f34cc9f5d0ffaf80f6db282444ec783143da5f4be460cd"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x58}, &(0x7f0000000980)={0x20, 0x0, 0xd5, {0xd3, "a62547eda0e5dc4fe1088d91a8735d6374568696e203304f205e9cb023425b46a62b21784f2184beecaec9ec1485aee9568d4da834549dab6b3a56f2abad32ee656f1a60103ba88aaf6b0e201549ac3921e38973037f31379488e7ddccc923aeae7a415b3e8366e1042381182d8a4a224e2c865989d5c5abb69b25c066f01b3949c02ba2add4a6c8559be8790652009988533dd57eb0abc0b581b4b8baf731cc4f6768735c3a1d9afcbb785b7f327a2160cefd2429c18cf4327c973aad305c0a3982fb394c332965790716c6663ede9f952ad8"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0xe}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0x8, 0x4, "003cb3a4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000004010902120001000000000904"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r5, &(0x7f0000000480)="92", 0x2)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_connect$uac1(0x3, 0xe9, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0xb9, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x37}, [@mixer_unit={0xa, 0x24, 0x4, 0x3, 0xc, "63b2334098"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x3, 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x9, 0x5, [0x1, 0x4, 0x3, 0xa, 0x3], 0xb}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x1, "b2209cb3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x4, 0x81, 0xf}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x7, 0x0, 0x7f}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfb, 0x3, 0xfc, 0x5, '!'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x9, "b0"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8e, 0x6, 0x0, {0x7, 0x25, 0x1, 0x4, 0x6, 0xff80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x400, 0x9, 0x82, 0xf8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x81, 0x4, 0x81, 0x8}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x37, 0x1, 0xfe, 0x2, "27f5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x6, 0x9, {0x7, 0x25, 0x1, 0xc, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x250, 0x2, 0x9, 0x0, 0x40, 0x69}, 0x1e, &(0x7f0000000b00)={0x5, 0xf, 0x1e, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x0, 0x61}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe5, 0xf8, 0x9a, 0x8, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x8, 0x1}]}, 0xa, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xc3, &(0x7f0000000b80)=@string={0xc3, 0x3, "9459f76dd94a209ab77c06e156238f2e52f5673cfd0d273caa117fe28c19db41f5825ce56a1fcd183cd2371b94a7b129c95658b56778194aca76d2d8a0f9e3e35fa2263d5589909719dace96d752bbeb30aa9fbebeb9632787f812e5471cc6f8b0d3b67c8dd25d0d9c4d66dea1f90e5b643af5463d8bae24fc25a791f9e4fb40cbd652371446d47f2f62cbaf5da5cd5e05a42a3494d5114ccb998b3e2fa0c450d5068fe9e87455138dddd058a2bf37a5e514cbdf78c359ede37db28d31f9931691"}}, {0xfe, &(0x7f0000000c80)=@string={0xfe, 0x3, "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"}}, {0xd3, &(0x7f0000000e00)=@string={0xd3, 0x3, "5cfc16126d507ed494bff69e748d15a35c0c86771c281a6e52ec27d6b10cb791d8703161310f50a1e814e83f1302ead17dcf62725e6abc110a155dbf419e602e1a1286c94b16795b2ce39a0ec8593c038ab87861d5241a3f6dd5f4075ad7d59ea132d656b95310a0f805318cdb2d4514b508111e214dbc975c494edaac106d464584bc79f76dd13d8162f425aa94150e2fa32c891520fa4b5b0875551d9030f09304404531f7660f51cdb7e2f56abacf05d3bb22e6e2542505d9e93db2078eb6bf4529e5695a1c7d6a7bed619d0525b6ae"}}, {0xd4, &(0x7f0000000fc0)=@string={0xd4, 0x3, "7bb1e3bb5db970b29a0fbc0718f95e3be59c75a9b2aa611d7b5ae6d8ca671d4f154e46a8a6f2f7f5ef5a566a5a4843b83dcf9126dcc2f43840c15681a4a80b524cbf9f6a122db2ba6194d3bed835d4c1f57973f6175c6a871e045c71fb6f90d1d4a177efa3d1278757fd5f5aa0bb151ea262f61ee13c3805f84e1198c413fa45aa90ed24f2d006b2f6ef09e7c53bef8a20a5755cc1b90cd1b8afdee82e013d807d5c5f899907b29a8f98088265d0f676fe39c955e831ff304400f7788354a0e1894a66c44c0c8813ce4f56eb3940e555db3f"}}, {0xe4, &(0x7f00000010c0)=@string={0xe4, 0x3, "7bb287b4627ce99ff99ea7d94cf20fb498a1219a08d69d160f39bb4d94954069443199e99fe32b2742ff4f16b3690ee285f048836ff39c1249672a2fcbffa4c9c68e224820e2ecd13f3abcec1ba2103cf4783c96273193e0015e6bdb9ef08eb39478624c203e0db4985961643d5d69cd601c85b5c3214a40dad665f61b853a372a5d8ede3645c15f8507f48c5f997b739de6fdbcde482dbee767a992ee58c663744274f1c9fd5feb894b8e4871d58eced55e544b28aa326479193e4fe3c3675d1b5653fc905fe2630af872929d3272c6c362901f104a5f118e22657148c9ac0a9c6c"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x421}}, {0x8a, &(0x7f0000001340)=@string={0x8a, 0x3, "152ad0605f5f127e41cf6b193db52d00d31565c4165908ce4d0f64ff954814e27fec0bd51a53b98ab9363db09a96ac0ad9cd3df9ad5629ab27f7ebd2a695049c6f4150d68a771ea518db98f97f80b10bd814a2f8941febb0f808bd0c95c232a4211c34f9b72127886613e4374e8b89a3fe977bf7c47e0f524a187534266445c5dca396414a38a776"}}, {0xde, &(0x7f0000001400)=@string={0xde, 0x3, "c4dc529efa6ef316ca407d0861eabc8cb92054d4f6ecd1391996f730a3fd45217c9e3f09fa98eef7cdd58646667cd436ad5138e14fbb52cf99df4c1241182859dcb52433c9c60f96b4d5efd1b584b039b9a961117622bfb02a12d4c534a359836c68a9f99dfae4c8be021a80db31e52f9a54141af0336199cb68082709e1dd157e272f634d2fc8ae70f7d7923c1415a92ada20d1dac75bb42041cd0a3d9984a40aa4d59c8cbec484f93be88cf6b6ba0cf91f46128b68cd91b6d98e7c1d6ee90c70ebedcd6e7295d682efa2f9b9bd2143e645fd1761277148eb0b25f0"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x41c}}]})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101959530263b7b49760829309102c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000680)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000100)={0x14, &(0x7f0000000140)={0x20, 0x21, 0x9, {0x9, 0x2b, "9f3bd6b4b3547d"}}, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r4, &(0x7f0000000180)={0x14, &(0x7f0000000200)={0x40, 0x1a, 0x22, {0x22, 0x6, "68ec3081cdc451f2d05b5e6b93ffffff9dd2a9155ec6a84a24eef5119102cc49"}}, 0x0}, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x20, 0x8, 0xa1, {0xa1, 0x6, "17b62b696efc93858b8565521f9866a1fce5976cfbbb5bbdd1ca5d4d69b151e331f70fd47a779074ef13cf62ee13fd19708df05cf1875bdd7e2830e93c51f201cf036b8f3ec3774b394aac94f29dd21b1c3909acc54cf509d81c71cc2cfe36e1da7c5752e6d6e16df653e2128518045143d11f23195c15160e929a9d85626e1ef4fe408ac347325fcc93329e49a12dcda387bd3d42a49ca63186f48785ae09"}}, &(0x7f0000000300)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "8425d6286dc3f2be30915c341172cb7d05e8f3a0d76f4ab5475b3543b4fcfd8ff1bb3c6468a12c40c2eac58baf1fe771c740ef1a3514932d08e3328a01a7f4ff3b730d5cc05512daa4079479cb466e1f7031b6fba8765798a3a44e4ade399c53242d06de1ae4a5fe3d882315c7e7d6847b83b582bb4c8fa29df8e483b50579bf461e7b2eed3d76577d71bba5ad81a601b6fa58c0f8093afbf02a647c2addbb586e0749a197021080a5860ccf28851adc7ba79dd6c44824df89c1a369574dade98db2753de11a6562780355edcef6daeb274f3df6e86fda434197463108311eb412180f783735a25cfa5c56a85d1592b36585e1ff8c44d3ef"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000440)={0x0, 0x12, 0xc8, "dac3ecb21b69e471603cd700c88ad89cdeb04f76e21492ae99cf095866a97076e402bf6e2c00f57bdd67bd81ad4b100acae29ab0719ff17904d1069cb2c3128a31b9a61acce92a509d9161049bedd3af2a7f6de7adff7175665cf9fc870bb32eebe446bec094f0ae6281140d80d3a4436a95b8ab68d49a752ee7f05315cd0b564032446eafbb2f0a8f9ced554633288515e468d3e6005f156a2cd97fc86fc5e15f81ad65248554ef89d80f2c295c299b4477ef63a04fefb9a8a4e97047083e67ce13cae786e5decb"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000600)={0x20, 0x81, 0x2, "6ef5"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "dfaeec"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "a5d0"}, &(0x7f0000000740)={0x20, 0x84, 0x3, "4938d8"}, &(0x7f0000000780)={0x20, 0x85, 0x3, '7)M'}})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f00000001c0)={0x0, 0x17, 0x2, "90ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040260933330000000000010902240001000040000904000029030008000000200000012228000905810300020308c5142ebcf2e8dc32b7df51a077f2b31f89794c94fcb03f4afaea068524da76e5aa6315d17ca21473b8000074b2c9ce2ec26426fa675e4456944e745a763fc37e41daf88f449e174ab2c0fd593019643a41d799d6f511fec2d932bb79297edc8bd7dca539488bc382f6d62308c55e6ba77e4765c04fb4f57b625550d1edee6353fd0e39"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010295d2d408720c0c00a1ed010203010902120001020200030904630700ffba440a2ab263b1035503c77ea227a07409a7a020e3a48c5acce2"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r2)
syz_usb_connect(0x5, 0x36, &(0x7f00000006c0)=ANY=[@ANYRES64=<r3=>r2, @ANYBLOB="194ab612a4d6d02b76abc9ee7236fdb0a08057b9434f4a564d8dab01955581bb5e1ee5a9025c8083de40ff1fd061e85871accb2805d730805960f701b9b7daf47b244ae6cb40595df9f243f06f3c0c8bbcf338a6eac8645f7526caa881f77b491e3e", @ANYBLOB="dda367397c0fe2c7280699c1903056dfcee8828efbe402bff982be902ba5d364f8cf9c207cdd40c23b4a941c502595b4552aae32c9cf0c8a16e78792d7f797f6a7af34a538b2cbfdec7caa2e5c03da7b38d18055be586cc3859a73d2f2a01dac8dd1b54c72309b3bc1fa6284e2cb28fa00dd1740957a8cb4601bee40ac8686c9e2e1611f4d7133caa42f6a6e65345b7c381f256a5c9b6075a27bb4fee511326fc152952759c0ef20a432fc0ba9449880b194b9594d3a07b19b8233c7edacf321a1fea7dcf4e3b644d9dd48", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESDEC], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000140)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES32=r3], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f00000003c0), 0xf93f000, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000001340)={0x44, &(0x7f00000013c0)=ANY=[@ANYBLOB="000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x163342)
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f00000001c0))
executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "37a466fe"}]}}, 0x0}, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x40, 0x9, 0x5, "49a234b826"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010b519210040000102030109027a0003010e0002080b0102010030400904000000010130000a24010e1600050000000c240b0002010000000d06000904010000010230000904010101010220000905"], 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$uac3(0x6, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x90, 0x80, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0x23, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x56, 0x2}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x306, 0x1, 0x3, 0x1, 0x8, 0x7ff, 0x6, 0x8001}, @multiply_unit={0xb, 0x24, 0xd, 0x45, 0x13, 0x0, 0x1}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0xa, 0x4, 0x60, 0x200, 0x0, 0x8, 0x5, 0x5}, @selector_unit={0xb, 0x24, 0xc, 0x8, 0x6, "769cd399a475"}, @power_domain={0xf, 0x24, 0x10, 0x5, 0xff, 0x3133, 0x90, "3fa3906cabbb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xe7, 0x3, 0x6, "84f2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xe, 0x3, {0xa, 0x25, 0x25, 0x7e82569f, 0x0, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x98, 0x37, 0x60}]}, {{0x9, 0x5, 0x82, 0x9, 0x650, 0x57, 0x1, 0x5, {0xa, 0x25, 0x25, 0x200000, 0x2, 0x4}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x4, 0x0, 0x9, 0x40}, 0x2e, &(0x7f0000000140)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x6, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x5, 0x1, 0x2, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "55c730bf1d6eb9598dd3fb031431a5f1"}]}, 0x4, [{0xfc, &(0x7f0000000180)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0xc1, &(0x7f00000002c0)=@string={0xc1, 0x3, "f0a7f5ceaf13a602dac671c8f4b01dafebd0e9aa47f538251dc69b47e72f1489aaeb0da8432d6cdbeade04a175519c3876ce0bfd45f5971bae7fc28a21fb066e3864191779fadcff87f2d54e74b08bb9fb8ca3e9469b0c69b969a048c22e028b62f3f2d1f2f3daa0cb0147a41074cb55e2635e128622db091aed94548ee6fad31af685a74e02896389469a4a2426e505d97d448977727fbbedd78387fcd9e209ef06f5138eb0ecf4ddfddc9baab2a12000817fb20c4afc718477cb169f99fd"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}]})
syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000480)={0x40, 0x2, 0x46, {0x46, 0xe, "49602124984031c7f70295d74c5e9eb3c170c8f9c03b8233b5ba2067961355408080eeb156f37a3d6b95c11f4d24bb008b939fcc27a24f7d11959b27fb0ed842c52b8998"}}, &(0x7f0000000500)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "747ff15cd8833600da4a701df4614133787e85213ee6d630d9222eff2f586616127eb3a8aeca6c71ece2df3fe0f9da54934234672e491eec43cd22bd919c3c104d1367980b56af035c682db72ae63ac51eb566e5fd664f67f7715d3c8df578621a0fcdbfa633806fe2023bceecc99072a3e82717af3175df3ac5e50d70bceb9d4b82ee526f1ba363c0d3d8b86905942447f5535a16b5befa097b6a40a0927fcfd82532d16e7c"}}, &(0x7f00000005c0)={0x0, 0xf, 0x13e, {0x5, 0xf, 0x13e, 0x6, [@ptm_cap={0x3}, @generic={0xf4, 0x10, 0x4, "72838cd71cd78f220a11867959ab886d7998632049afd6c24aac377d06dc00fe8dc8794230bb4c484722b10976b87eed0303008c66ea43472d66f22dcaaa6ec6d70e0cf91c2b66a7f20531522bdb01cbda7846638c07d7f6183bd40f2f16710cebfb886cbe67c7db1a7a51f8eaa5513597d45c56ccd35fbb222837f7b8031a631eaff01515114bed38ac676ddc3ab5453b38021742ef21c6093febb141baebfc1efd11e0018fd4202303759e59fac46f0ac30f292bd32b52d675ffb1df91b1d8e81bcb059bca9b1e61c5c6efe8d0feab07013f91aa0e75672c9a33812047a499d826d8990a280d1d2973207b98081f873a"}, @ssp_cap={0x18, 0x10, 0xa, 0xe, 0x3, 0x9, 0xf011, 0x7f, [0x30, 0xc0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x2, 0x7f, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x0, 0x4, 0x800, 0xa0}, @ss_container_id={0x14, 0x10, 0x4, 0x9f, "59261f7fd890d5dbb5d42ba05f729c2d"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x9, 0x3, "b95f4fb7", 'Ql6G'}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x45, 0x4, 0xe, 0x8, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000800)={0x20, 0x10, 0xb3, "7efda1a6bfc93d6441df6f2f88af9751438aea2cd0bd3194b70071312f480d85764ae19e07b55d26d5ed20e58b9c7087d024475004c97778e37ffb2b78d70039c8e09a3cffc59f4e1c5605a75c50b9e000fd761618963e8a33503d2d3d7ef5893e9c523739c77b31db435f9991c6ed262b9486c450db8bf0feb040f132c8614118a9663f2ef2dabfbf35e7e87955e88d538d417f000a036724bac3937c11f698b1a4522e82e2d725a6cf5d798ae16cc820b286"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x1000, 0x28ebe6ea64a6ce96, [0xf0]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "32e6"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x21df}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, '|1'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$uac3(r0, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x0, 0x11, 0x45, {0x45, 0x1e, "4a105ec8c35d4623f930957b5061fe4b00c643731e9b8ea68925d0c44b561d9697526ac5200d9a31f7365f3bd7625929d637658c12b3b2bdcdcf42e7026bc268ada321"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e40)={0x0, 0x6, 0x48, "68df9c6cd92609aeb760c2c21f9000f6f8e9ec1f3fba6652e2dc9d26457cba327fd886856cc8c62a29ab656ca691950d4470e2a0436628fce62ba890b1f9a2537931f06caea95645"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000f40)={0x20, 0x81, 0x3, "0d1a1f"}, &(0x7f0000000f80)={0x20, 0x82, 0x2, 'J*'}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, '\"*'}, &(0x7f0000001000)={0x20, 0x84, 0x2, "c09c"}, &(0x7f0000001040)={0x20, 0x85, 0x3, "b25f4f"}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x6ff)
write$char_usb(r1, &(0x7f0000001100)="2eb328bc814ba8b44f7a1bf971cbd0efd6c1bce179927bbd96575042b9b9141b2d8aa76834283cbfe871975f8675bcc15c99f24a6c0b164433eb7b112539abdcf3c8e172d3fbf21c3d3466536234062ac54d1e46e9bc08aaf7c701b568f4f3d8d48a581f45eb025d9450c4832c69bcf08ca7f44a14a8f5d8783fa8a1502793bd28ae6d6f83c355e5a6a5df610c28435fb45ebc127b0090fe6c0e01835dc9edb78f0f191c1cceba5685b7124d019da3098ac33c2b5acdbd2a9409c1be2b3465d83dd85d71f1f2114bbab95fe2466e698b2c69c163a7e97285451c9954", 0xdc)
r2 = syz_open_dev$evdev(&(0x7f0000001200), 0x3, 0x0)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000001240)=""/154)
r3 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, &(0x7f0000001500)={0x14, &(0x7f0000001340)={0x60, 0x7, 0xad, {0xad, 0x9, "91131fa34611acd6a121541491487fd312de67bca983da8bfc004ad6447efc8a5999a8882fcdeb1d804bb761d3e4d3800c4cbe961747178b2093358b5e96a7a7eb25bd163c73937c1e1449c7fdf99a54edd6b85312d7063bfb726f3e1ca18992082875b0e3a15fe48c30caaf26577f60f64bb127d89c0d2b2f644561be352c46e066477fa82f826d13528654350409657237675d500ffeaccd6be36f6e6861e8cdd55be7fef7ff7a2b5625"}}, &(0x7f0000001400)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "ebee2be1f3a8e06a6f323cd80e972e45a47bd9bea36b767ba8f29650e4c07bd99a0038f11008ea39911be4bfaa360e2744a482fe9a94021891d25a2771fbb2e6417952ff1e2fce7f31e92f6aecf3469596b82b40e93d91a7c32a04864a794f243b2e193378b4c30c255885d7f134a7b6d215f681d95607221d6702cccb535a2a3d815529d3d8823a989c44282ca3d4a941c82e37289304ade370d5ee4472b1d432928df13e79327beeb574cf3cb9baf7ede021255e281b392776839577c77d7c5ae99a49abd5"}}}, &(0x7f00000016c0)={0x2c, &(0x7f0000001540)={0x20, 0x15, 0x41, "f23119ad56b10e00d138858c6aaa8d16bdd8d6b3bdf1f4950d66827b0645e777ec760c3497022589973a44deaa54dca61f0ab832624cb0d07fa801a7e184a64d79"}, &(0x7f00000015c0)={0x0, 0xa, 0x1}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000001640)={0xc0, 0x5, 0x5, "32ba4097ee"}, &(0x7f0000001680)={0x40, 0x5, 0x1, "d6"}})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000)
r5 = syz_open_dev$hiddev(&(0x7f0000001700), 0xc57, 0x200000)
ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x100000000)
r6 = syz_usb_connect(0x5, 0x1ba, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x2f, 0xd0, 0xaa, 0x10, 0x7b8, 0x3074, 0x609e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a8, 0x1, 0x4, 0xff, 0x30, 0x3, "", [{{0x9, 0x4, 0x47, 0x3, 0x7, 0xb2, 0x6d, 0xb9, 0x1, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x400, 0xfb, 0x82}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0xcf, 0x6, "", "1602"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb0, 0x3, 0x5, 0x6, "", 'Y'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfe, 0x1, 0x8, 0xb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x0, 0x8, 0x6, 0x1}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x1002}]}], [{{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x0, 0x8, [@generic={0x3d, 0x2, "13f62abff1b2fa73ce7be4d0a1c9fb2446d8a34cf87593609e22cc8347f961b4ef4ef92cbf51d301ea2878bd95f9a76718365f47c9f65992462a1e"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0xff, 0x1a, 0x6}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x4, 0x7f, 0x81, [@generic={0xb4, 0xa, "191c6e9e8f586b2c45a299d08bdb2cf880fbe560ee56c0a5d23ce6a84fd86d1701ebf5d18b8cb3808d3c327914619fd7dc8d664f33c38eeb18bd6e46a85a6df12cf0529cef174d5695fd3ea6505b5b169d0a0b265bbaadcab3bb8bf3a208cb6d2924dfd01367aa28a8eab22589ae246ccd66908dfba3bf7f3bc189356676f55a594b9edf90166539346747964516cb288c0ca182791bcf23c55448167596fb7345484734e81e351859e209f5946f2fe5e7b4"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x63, 0xcf}, @generic={0x16, 0x5, "8e941b5ec44915c9b503ec87611b7f99b508eed9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x7f, 0xb, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x7, 0x8b, 0x2}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x80, 0xe3, 0x8, [@generic={0x6, 0x31, "b93ea0b0"}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x250, 0x4d, 0x1, 0x1, 0x10}, 0x11f, &(0x7f0000001940)={0x5, 0xf, 0x11f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa7, "a850b362b5be6f09ff246904586531fc"}, @generic={0xde, 0x10, 0x1, "922c971cac0f94c6b41a385ca4af93699498402d9a5a9453eec811255428dc238ec2c5dc7f75117ef9461aa8459dea323c7e2256d5244d886560f8756e5179b6e133b5c5790f5e72e75c0c8cc0dd10809453eafccd538445685402abba6270104c7101333871e6dfaf0b7a16f160d67b43ac4305bc58c152743ed2811e1ecfba06fc7b58ba192fae0eb4a6ef786e3892935677caf8e1c52fa7f80965aa2344a85a1f25bff0682b857f75df3688ac7511408eebc78db3570f8217cfe4def3978af7e4f00cc9466db5bd9415024b749e64f2a8a62794a1929322e49e"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8e69ba4c0b116c9e6954f34853e62b6b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "cac7eef3d750966a7fd080f13e9d87ee"}]}, 0x3, [{0x95, &(0x7f0000001a80)=@string={0x95, 0x3, "a9a22d171f54dc0ee9035792bd0875738a2daf5d804149dd4538ea3b0f6067eb06ad7ecfc6c969563ca04f03e3ade8902cdf5dc9e076c7b331c789917a1aaa29b706210d474ee54aa5ddee9ce278480bd2a04b6461f07a56a381b3ca49f78b6e10bb17fded74d3661026f9afa668c454dd17aab2a1d10bbba99b435b183ecbcdc10a947f106653e76b2f6cae7ac2f8c46e8e06"}}, {0x44, &(0x7f0000001b40)=@string={0x44, 0x3, "e0b1e72831a8bd3460367dea9658c49fb39a6896e240c682c60f056ec2b8f651acc9c26ef660c37a747211bc7c6fc26c564dde67a2214c8ce53370ecd952b911fbdb"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x140c}}]})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001c40)={0x4, 0x0, 0x375, 0x3, "335ff7e42598a6136df0441672d69686626967844287b407fb712452ce7a2e02"})
ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000001c80)={{0x3, 0x200, 0x7be, 0x4, 0x1, 0x2}, 0x396, [0x4, 0x9, 0x1, 0x8, 0x81, 0x36, 0x2, 0x7, 0x51af, 0x40, 0x10000, 0x9d, 0x4, 0x321, 0x4b9, 0x9, 0x7, 0xe3c2, 0x2, 0x6, 0x6, 0x9, 0x4, 0x7fffffff, 0x6, 0x7, 0x1ff, 0x2, 0x1, 0x51ad, 0x1, 0x3, 0x9, 0x7, 0x3, 0x101, 0x3, 0x0, 0x1000, 0x5, 0x4, 0x6, 0x24000, 0x1, 0x0, 0x8, 0x19ef, 0x0, 0x6b0d, 0x80000000, 0x80, 0x3, 0xffffffff, 0x5, 0x0, 0x5, 0x7, 0x7, 0x869, 0x3, 0x8, 0x9, 0x0, 0x0, 0x1, 0x4, 0x8842, 0x7, 0x3, 0x8, 0x5, 0xff1, 0x4, 0x1c, 0x4, 0x6, 0x1, 0x6, 0xc, 0x2, 0x9, 0xfffffff8, 0x4, 0x10000, 0x4, 0x5, 0x91, 0xe6fc, 0x200, 0xffffffff, 0xfffffff9, 0xa426, 0x7, 0x5, 0x7, 0x80, 0xae3, 0xff, 0xc837, 0xbd, 0x0, 0x6, 0x1, 0x101, 0x0, 0xffff, 0x2ea6, 0x20, 0xfffffff8, 0x9, 0xfffffffb, 0xfffffffa, 0x8, 0x4a3, 0x1000, 0x5, 0x16da, 0x8, 0x80, 0xfffffffe, 0x1000, 0x2, 0x1, 0x7, 0xff, 0x0, 0x9, 0xffffffff, 0x6, 0x4, 0x9, 0x0, 0x4, 0x1, 0x101, 0x9, 0x899, 0xb0, 0x9, 0xb, 0x6, 0xb0, 0x100, 0xffffff6a, 0x4, 0x2, 0x4, 0x2, 0x7, 0x6f5b8113, 0x8001, 0x8, 0x1, 0x80000001, 0x7, 0xfffffffa, 0x7, 0xfffffff7, 0x80, 0xa80, 0x800, 0x8, 0x7fffffff, 0x1, 0x8, 0x6, 0xffff, 0x8, 0x1, 0x927, 0x9, 0x3, 0x6, 0x5, 0x3, 0x200, 0x5, 0x7, 0x1a80, 0x0, 0xff, 0x2c3f, 0x0, 0x3, 0x400, 0xfff, 0x5b0, 0xfffffff9, 0xc, 0x7ff, 0x1, 0x2, 0x1, 0x9, 0x4, 0x0, 0x6, 0xeb4, 0x7f, 0x8, 0x10000, 0x400, 0x6, 0xd2fa, 0x5, 0x66e633f9, 0x3, 0x9, 0xfbae, 0x80000001, 0xfff, 0x83, 0x5, 0x0, 0xffffd83d, 0x0, 0x401, 0x4, 0xff800000, 0x10, 0x7, 0x9, 0x4, 0x9, 0xd00e, 0x800, 0x7f0000, 0x6, 0x6, 0xa8, 0x4, 0xd58, 0x2, 0x3, 0x10001, 0xffffff7e, 0x6, 0x7, 0x7, 0x0, 0xd4f3, 0x2, 0x1a2, 0x5, 0xc6c8, 0x1000, 0x8, 0x5, 0x1000, 0x2, 0xffffffff, 0x800, 0xb, 0x3, 0x7, 0xa, 0x84, 0x43f, 0x6, 0x1ff, 0x3, 0x4, 0x6000000, 0x3, 0xf35a, 0x1, 0x6, 0x9, 0x7, 0x2, 0x7, 0x5, 0x9, 0x1ff, 0xff, 0x57a, 0x9, 0x9, 0x7fffffff, 0x1, 0x78b, 0x0, 0x2, 0x4, 0x8, 0x47, 0x7, 0xe8, 0xffff, 0x3, 0xfc, 0x5, 0xc8, 0x7ff, 0x5, 0x8, 0x480000, 0x2, 0xfffffffd, 0x84103a40, 0xe92b, 0x2, 0x2, 0x5, 0x8, 0xfffffff9, 0x2e, 0x7fffffff, 0x7, 0xcc, 0x5, 0x1, 0x4, 0x1, 0x80000000, 0x5, 0x6, 0x242, 0x0, 0x1, 0x6, 0x0, 0x7, 0x4, 0x8, 0x66, 0x7, 0x8001, 0x2, 0x2, 0x3, 0x81, 0x8, 0x3cf947ad, 0xf84, 0x5, 0x8, 0x1b9aa, 0x0, 0xfffffff7, 0x7, 0x200, 0x53, 0x3, 0x0, 0x80000000, 0x5, 0x3, 0x4, 0x2, 0x7, 0x7, 0x9, 0x9, 0x3, 0x4517, 0x163, 0x4, 0x9, 0x3ff, 0x9, 0x9, 0x8001, 0xf58f, 0x2cc, 0x4, 0x9, 0x2, 0xfffffffb, 0x566, 0xfffff001, 0x1ff, 0x9, 0x4, 0xe, 0x9, 0x2, 0x80000000, 0x1, 0x80000000, 0x2, 0x200, 0x0, 0xb23b, 0x4, 0x1b, 0x4, 0xffffff00, 0x100, 0x1000, 0x1, 0x4, 0x4, 0x7, 0x10, 0xff, 0xf, 0xfa55, 0x7b, 0xd, 0x8, 0x6, 0xf0f3, 0x4d8b, 0x2, 0xc6, 0x0, 0x1ff, 0x6, 0x4, 0xfffc0000, 0x0, 0x81, 0x6, 0x3, 0x0, 0x1b84, 0x8, 0x81, 0x5, 0x9, 0x0, 0xffff, 0x3, 0x100, 0x0, 0x2, 0x2, 0x1, 0x3, 0x6, 0x5, 0x1014e82f, 0x5fa, 0x7, 0x80000000, 0xffffffff, 0x80, 0x6, 0x3, 0xffffffff, 0x0, 0x9, 0x4, 0x9264, 0xd7fb434d, 0x8a5, 0x3ff, 0x200, 0x10, 0x2, 0x0, 0x2, 0x8, 0x2, 0x4, 0xfffffffe, 0x1, 0xc1, 0x8000, 0x3, 0x5, 0x6, 0x4, 0x5, 0x5, 0x100, 0x101, 0x14000000, 0x8, 0x7, 0x0, 0xb, 0x9, 0x628f, 0x3, 0x7fd, 0x800, 0x1, 0xc1, 0xd, 0xba, 0x0, 0x1, 0x8, 0x4, 0x7fffffff, 0x4, 0x767d577d, 0x81, 0xffffffff, 0x7, 0x6a2, 0x7, 0x4, 0x3, 0xffffff81, 0x101, 0x7, 0xe, 0x6, 0x7, 0x9, 0x9, 0x8, 0x0, 0x9, 0x7ff, 0x37c90f95, 0x4, 0xaef, 0x9647, 0x1, 0x9, 0x6, 0x13, 0x8, 0x2, 0x7, 0x0, 0x2, 0x3, 0x7ff, 0xe7, 0x9, 0x6, 0x0, 0xffff, 0x8, 0x308, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x428, 0xc, 0x0, 0x80000000, 0xfffff800, 0x5dd, 0x8, 0x4, 0x7, 0x7, 0x594, 0x5af8, 0x8, 0xa, 0x8, 0x5, 0x3, 0x0, 0x4, 0x400, 0x100, 0x81, 0x782, 0x0, 0x9, 0xfffffe00, 0x9, 0xe451, 0x2, 0x10001, 0x7, 0x2, 0x3, 0xfffffffd, 0x7, 0x1, 0x8, 0xfffffff8, 0x22f, 0x1, 0x7, 0x4, 0xee, 0xe, 0xe, 0x9, 0x36, 0x5, 0x6, 0x9, 0x1, 0x9, 0x49, 0xc, 0x5c3, 0x8000, 0xff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x1, 0x4, 0x11, 0xfffffffc, 0x8, 0x2, 0x7, 0x1, 0x74, 0x5, 0x1, 0xde, 0x10001, 0xb25, 0x8, 0xfff, 0x8, 0x5, 0x0, 0x7f75, 0x9, 0x9, 0x3, 0x80000000, 0x8, 0x7f, 0xb251, 0x1, 0x8, 0x3, 0x80000001, 0x4, 0x8, 0xefc7, 0x4, 0x0, 0x40, 0x4, 0xffffff23, 0xe06, 0x101, 0x6, 0x7, 0x4, 0x6, 0x5, 0xfffffffb, 0xfffffc01, 0x0, 0x3, 0xbaed, 0x9, 0xffffff0d, 0x1, 0xd, 0xe, 0x1, 0x6, 0x1, 0x2, 0x100, 0x4000000, 0x3309, 0x7638, 0x29e8c671, 0x8000, 0x0, 0xd, 0x9, 0x8, 0x7, 0x8, 0x7, 0x8, 0x8, 0x7, 0xfe5, 0x9, 0x0, 0x1, 0x7, 0x5, 0x200, 0x88, 0x0, 0x8, 0x2, 0x7, 0xbdb, 0x1, 0x5, 0x0, 0x1, 0x8, 0x8001, 0x2a9, 0x5, 0x2, 0x0, 0x5, 0x6, 0x6, 0xf, 0x2, 0x8, 0x8, 0x8, 0xfff, 0x0, 0xffffffff, 0x101, 0x92ba, 0xd435, 0x3, 0x800, 0x5, 0x100, 0x4, 0x6, 0x67, 0x9, 0x0, 0x3, 0x8, 0x7, 0xc000, 0x9, 0x2, 0x4, 0xd5e7, 0x5, 0xa, 0x5, 0x7, 0x401, 0x9, 0x10, 0x8, 0x54, 0x2, 0x8, 0x5, 0x47fa, 0x80000001, 0xbb, 0xffffff26, 0x5, 0x2, 0x18, 0x200, 0x5, 0x4, 0x7ff, 0x7, 0x10000, 0xfffffc51, 0x0, 0x8001, 0x3, 0x6, 0x4580, 0xffffff8f, 0x7, 0x101, 0x7, 0x53c, 0x2, 0x9, 0x80000001, 0xd0, 0x1000, 0xc26, 0x2b, 0x1ff, 0x5, 0x3ff, 0x1, 0xd8d, 0xe, 0xfffffff8, 0xffffffff, 0x40, 0x10001, 0x0, 0x7fffffff, 0x3, 0x1, 0x5, 0x0, 0x5, 0x4, 0x3ff, 0x4, 0xff, 0x9, 0xb, 0x0, 0x3cc, 0x81, 0x4, 0x9, 0x0, 0x2, 0x80000001, 0x7, 0x3, 0x0, 0x4c, 0xe1d8, 0x5, 0x5, 0x9, 0x401, 0x401, 0x4, 0x428f, 0xfffffff7, 0x1, 0x7, 0x7, 0x0, 0x476, 0x0, 0x2b4db9d8, 0x1, 0x40, 0x9, 0x31, 0x3, 0xff, 0x4, 0x9, 0x7, 0x1, 0x3, 0x4, 0x9180, 0x9, 0x8, 0x0, 0x1ff, 0x3, 0x1000, 0x9, 0x9, 0x4, 0x2, 0x2, 0x1, 0x10001, 0xd65b, 0x4, 0x5, 0xe1, 0x6, 0x0, 0x5, 0x8, 0x2, 0xfffffff7, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x0, 0x3, 0x2, 0xb, 0xbe, 0xa9a, 0x7, 0x6, 0x1000, 0x0, 0x7, 0x4, 0x1, 0x5ad, 0x9, 0x4, 0xffffe243, 0x101, 0x80000000, 0x6, 0x6, 0x3, 0x1000000, 0x5, 0x9b, 0x5, 0x9928, 0x5, 0x94, 0x6, 0x800, 0x5, 0x3, 0x9, 0x0, 0x7, 0xfff, 0x5436, 0x2, 0xc33, 0x2, 0x8e, 0x1, 0xfffffffa, 0x4, 0x7e, 0x587, 0x1, 0xfffffffd, 0xf, 0x3, 0x0, 0x2, 0x2, 0x8000, 0x3, 0x3, 0x2, 0x7726, 0x5, 0x3, 0x2, 0xfffff4ea, 0x80000001, 0x9, 0x4, 0x4, 0x6, 0x3, 0x7, 0x0, 0x3, 0x0, 0x6002d497, 0x9, 0x0, 0x2, 0x2, 0x3, 0x9, 0x3, 0xca1, 0x6, 0xa3, 0x3, 0x40, 0x2, 0xee6, 0x5, 0x7fffffff, 0x8788, 0xb, 0x1, 0x9, 0x4, 0x6, 0x7fffffff, 0x3, 0x7cbfe3fd, 0x5, 0x7, 0x7, 0x0, 0x800, 0xb, 0x45, 0xd3, 0x80, 0x2b84, 0xaa68, 0x7, 0x7, 0x1, 0x8, 0x71e, 0x1c, 0xfffffff7, 0x8, 0x81, 0x6b, 0x8, 0xc6, 0x0, 0x1, 0x5, 0x80000000, 0x3, 0x0, 0x6, 0x1, 0x8, 0x101, 0x1, 0x36, 0x0, 0x1, 0xfff, 0x4, 0x13f9, 0xf, 0xdc40, 0x4, 0x2, 0x8000, 0x4, 0xdc4, 0x1, 0x400, 0x5, 0x9, 0xffffffff, 0x5, 0x8, 0x6, 0x0, 0xb, 0x5, 0x9, 0x9f1d]})
r7 = syz_open_dev$evdev(&(0x7f0000002cc0), 0x6, 0x400000)
ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000002d00)=""/188)
syz_usb_control_io$printer(r6, &(0x7f0000002f80)={0x14, &(0x7f0000002dc0)={0x0, 0xe, 0xf8, {0xf8, 0x0, "2a77c661460775e108ad1af3b28fde1984bb8ad7580f6cb1f82d83228497bffe649a64385234c211ff2af4e83d7fdfe07944e5adc3d7894fb97c55a6f3c1f24dcad44188ec13eb45d1abb7a56b574080822ef5526731c5369f272d0c151ab90499d4351977218d03d0be600f46b7895db5d561c0f75cab1a3b71987a69c9d7f6262a97e8a5ec75ace9514dfd622a14651ff7c581af7e09e667bf6d03fa2b27e2bd06796497a07864601560289a7fd4a703daf2dff658d4475f40f945ea5a180809e1b290bac08d1701fa0c6cd8540c2e5924f841284b6ec3ef2d4266e9ab4feff290b932890ef65f4845e0e0050524007b0463f7b51d"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "3824a38d448a66011f613ec39fb2ff0a95b6adc002940611a5464ff09589ace7b3e8130f2fe59af9b791e99358f942456b678e61ba17f164255f298fb653af2bbbe084a77f1cba2015ea7c457f49bc1354569dfbf5ec5803a609754a87538770a68adf2752f8f95aa61a3807ac56a1a3ac598a5d01b5e0da6b3980d8437da078ef7a3bfc1d833cbd4daec4837404100fe505a65bc965a92a"}}}, &(0x7f0000003240)={0x34, &(0x7f0000002fc0)={0x20, 0x14, 0x5b, "e94136f70d672603e06b80b429d933339df9b02587b51cf3f370531524dc1eb01eb78d512881443fffab3161ab755820c651796ec6a3fdbf1f8055825aa8fd5109431c282c162d79392ba4dabfe350a37e4ccbdc2e503ad6dbb564"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000003080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000030c0)={0x20, 0x0, 0xd0, {0xce, "7e602d3d8049a92830190993009571bada562a1f952b47e6be2195085e998ef7efe6a48b703f6baa0e458d4f33f8e4b30d013e8e93f53e65563c1c5c428b1bdd44a9d0bc16f96de14db15ec3b547c8ab32fe6b4d266db3b949ad7f5652356e7b233668f8ac0e82d1b3b586e9ffd9dac328441988c29b19182d9ffb92d86e7188b56e591c766168e9802438133df059b703a6f7f4269ea632161c2bcf9d8850a1d5cd4f38cb7ede939e28d39ec52a0e7796cfe3decd07d212274614b8edb1537f9accae3ad386807784aed39b80b0"}}, &(0x7f00000031c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003200)={0x20, 0x0, 0x1, 0x9}})
syz_usb_control_io$hid(r6, &(0x7f0000003440)={0x24, &(0x7f0000003280)={0x0, 0xd, 0xf6, {0xf6, 0x1, "aaf7b0627da7b49bec3bdeffe0465eb1d1c8248902b60f09c92ac0e5d879364761fb3ae2f0a62095fba1dd932e625978b924880e099059f78bdbf4e09b36947e01f99e341c3ced9878d9c5b913253f099858361b735e0bc1a9095401e83615467dfb8d428c75fd76b4525d61dfbe6ee12d7e5900999e15e0ff1c2163364697de46073a639c49dfe3411f462bb6a5d3a0b3003f78572eb2e588992d693a15d93831817ed4fc69b75cfa03ae0ea0a2ede07fa14d3c8b66b32224f9f72bb4f4a230c5d985add62f7ff466cebad1202ce494ade23d4ca81e58368d2942fad6c9cbbd0f43ce25483147a091c07d2b41864cd02875667a"}}, &(0x7f0000003380)={0x0, 0x3, 0x12, @string={0x12, 0x3, "79e38c70f6bff85e7ec6d233ce39dc00"}}, &(0x7f00000033c0)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0xa, "18999aa7"}, @main=@item_012={0x1, 0x0, 0xa, '^'}, @local=@item_012={0x1, 0x2, 0x2, 'k'}, @global=@item_4={0x3, 0x1, 0x3, "ed664015"}]}}, &(0x7f0000003400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xbf9}}}}, &(0x7f0000003700)={0x2c, &(0x7f0000003480)={0x20, 0x15, 0xb2, "26b65ef0a52ca64c1f7693e76f2db38cfe549a29133c7a96a1fcae6ef60c0807c1b6d749f1167ff0ec7cd8c8f52c47694438c8df19567c94b3703d0065ded639f62cd2a612ce3032c01fff24a536ad7aedc95a9439ebfabbe1b9e8919f1c2e93ada0b0b3978c3b34c02f59ce2af6feeba9ee7faec60fdd473af7c6a816dfb054f3402c26f9c3f35d5c6e38fa48c3232335adea775a8c82a678c4a238834fb0dba9c23ed6f21defa5d19364ea784e2a3b5707"}, &(0x7f0000003540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003580)={0x0, 0x8, 0x1, 0x37}, &(0x7f00000035c0)={0x20, 0x1, 0xf8, "e0e3c720a7c6a6a7db96b7eec5b0e55ad2fac53dd5d476ae9208d1a84a49fc3382a1f5eb21cc413951cfbc9a8afa84097a2f537438f2fe032bdd1a7dcf72eddd73b503cef126b068fc8a612d646e175a2a881d4d6cb47134c5025b16e5770dbeb221460bef98888a62d6a73f9c3fb8d0e72533bbdd84f5b18dae406da84dd1211534cadba0741a475566c70c4f3daace33555aa53036d4528206156ce8cff6d8ed398599d1c1b805b30252742b8be7b7edfa288413a370781555ada4bf49a280ed3f670bfa207f60d5801ac62d2c71ada4cec05d15b8683ca95764c610162c8cc49717e95a9ae89b2fae04a57dda88175c9ff41f25c6fa33"}, &(0x7f00000036c0)={0x20, 0x3, 0x1, 0x8}})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000038c0)={0x14, &(0x7f0000003740)={0x20, 0x0, 0x76, {0x76, 0x5, "f9684757662406d73e3b96d85ac14da3ec56bdb7f0911e79c86742a87bfa54d4c325fecdfa94aa49f6b4ee01de26b248ed0ee0fd3f542dba19744cdc4cf7bfc04ac400dbabf468e592c76106f2c42b0f0bb4adc9c258fe3e88ca4934e20c67467d1482bbb940159a9319ae0a85a6b4aa8acea6d1"}}, &(0x7f00000037c0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "8abe9cfc232d17e7c2ddb0bfd00995edc2ad2d4ffadaa17a1cc31e437f369214c082f90a1468d026957f2fae11bc0a132a02d4d8ce6deb1501ec6c66a55dbff2dd8829bbd66ad41a7c3821e43eabb910f200d2837cd400807c15dd0e7256d1528f6baa6578bf52f9a2432c88b75d41b1452d8d1fa497d4b44e7e952429a3351846a09a7c1350ae65786aaf2b56eed8a426a7fadb84bf648868a042a02a482a0deb260d33e744f41bb0f8f63a4042f9228aa6199a98e9faa6568ae94549bfe6a0fed5241b6089fe19735bdb871971ded1ebf14abc2fbee067106aa8b741ac56aa42"}}}, &(0x7f0000003bc0)={0x44, &(0x7f0000003900)={0x40, 0x30, 0xeb, "c77cb6830153684a56bb0d89fdaf258d9eb885b5f928e37ccdaafdb00541ed74789b0fb227fc090e7346ad4a3137fa5bda0758d817280d2e8df8e346db4c788ccd41ab2c5b73bfbf1e099285b9fba753e3d3bcfe0129c899f79df914e5ca6840aea93ef0a045748f9780764b05b7094e9cce06d9d77a31b650675f1487c3b9228543989ffd5823bb5a49df8b09d16c3d2ce57b19cd1ce858bff6aa79d748f462e82087bb7a5ca885f7ca84ab70b405d097559fa9441c7a41d1dcecf78f0e3a2417b3d1cafe2d4fb6999325e944e776fc12be75398d09206c51bd8e8fb816068cb4d997828b0aa22188d119"}, &(0x7f0000003a00)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000003a40)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000003a80)={0x20, 0x81, 0x1, "92"}, &(0x7f0000003ac0)={0x20, 0x82, 0x1, '\''}, &(0x7f0000003b00)={0x20, 0x83, 0x2, "971b"}, &(0x7f0000003b40)={0x20, 0x84, 0x2, "0ecb"}, &(0x7f0000003b80)={0x20, 0x85, 0x3, "58c479"}})
syz_usb_control_io$printer(r6, &(0x7f0000003d80)={0x14, &(0x7f0000003c40)={0x0, 0xf, 0xc3, {0xc3, 0xd, "92cf7371c00aea1f3a152fc3ff5b62cccb83e723dcbaf85050e1846317c2c1b04d1372d888417ad74aa7204c15555d687971a88bf86e6bca88be32e65526dcabcd6c0788085240565080e0f379b67cecc9e17a5196f5d494e796a79c833c1b8f58006f24eea3eb095a9b961dfc6f1205b3e904e21ed4c4269b0739c9257c8ba4f6f28f95d8e0a6dc09306581a605a31bd274aac499901edf4e43c9e19da5cf7c2b901df8cf93e2214b832bf52ca48a32620d0e41589e0175e732c5d05ca62630ed"}}, &(0x7f0000003d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, &(0x7f0000004040)={0x34, &(0x7f0000003dc0)={0x20, 0x16, 0xa5, "20e9f209fc15e827d5b84e4eefc11cac26b798d15b2e74677cb4e515db6006fe1b04505d9a0f9d72f23a38aadd6735175a939f012670093c0aa7840df451afdb822bb2a160e66cda05ac183cba55eccc030716541b79870e36de3e77344e67db23defd8760475745dab40de21d73998b08c518687b8e00205acec1ec5df46811977b98eda081b7db4f53bed4c5e109888024edb8dac2e31f28517dc7bbb3732ee30cad7d8e"}, &(0x7f0000003e80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000003ec0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003f00)={0x20, 0x0, 0xac, {0xaa, "d2a109d326ca94973704246f611c270ee76ecf43d4a9f4a9eedb7beaf87ef3d606830323e9671b29e941b329dcc2ac555598335989064b2f2af6991895acefbe7ab93345c6aeec6844d9767bd8565e98bbea3f16573f517af3a225f1c5de018b24224cec6c1f19eeee6b63bf4bbebb9f15eb638f725b4f6869266a6cc1deed5325a3ffa613cf2c6872d838e365b80ef1c963e1d85a9cd04f09f88bebfd7e5f7ad1fe1b20b495634bcaab"}}, &(0x7f0000003fc0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000004000)={0x20, 0x0, 0x1, 0x5d}})
ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000004080)=""/89)
ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000004100)=""/4096)
syz_usb_ep_read(r3, 0xe, 0x44, &(0x7f0000005100)=""/68)
syz_usb_ep_read(0xffffffffffffffff, 0xb, 0xfa, &(0x7f0000005180)=""/250)
ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000005280)={0x1, 0x1, 0x2, 0xcb, 0xfe0, 0x6})
write$char_usb(r4, &(0x7f00000052c0)="df149a728abf1fb242678a4ed7e49f33375d43725207455e3cef501248ca5d3e30b328889f36bee9bda07cfd1dba1d57e186c41962f0e33229b3fb3f8c3243d01422ca6dc2c81b6998b037e6befe46e19742e695428feec1d5685daac1c56ce2a811b224824a26d701b85d59f6e609968dbff261486481809073f83329e1", 0x7e)
syz_usb_control_io$hid(r6, &(0x7f00000055c0)={0x24, &(0x7f0000005340)={0x0, 0x3, 0xf8, {0xf8, 0x23, "c5fd158a8a2ee59298ca5cdca52df691130e544f32b564ef84f8889d22b85edfb887a46babe854cd24fbba6eaa4a634feddbdf457907ed59cc90b7216d5cd9206135184209afda6ee6443f7df43b61a0b16530d93848d0544f5b887d8dc2f688d3dbe89eadb7bbef52673254e350b5e320f57f94f77ba9bd0858a1f7ba9adb3ce66ef5dbb931e3921cc24bf580e4314a1362f0021d8e5e3b1b78b186ca92735c887e54d880228d1b397ff06d32e9a6c48c27d2a2d7bb762ac1c4ea284d71e5b28384c199789ae8da088eec977ec89b18f40d05935343d95a18d1678b6c57c710d4c36afd36cf72be5ff5257bdda15ebbc1d20b669a58"}}, &(0x7f0000005440)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "b86aee922389899146eb5bb0afc6271d462e2a77bc1a14667fb0f59ba671851e8280a4d40a614076c7286a98c9a792ea51000490b87b88d7ae6336d4514c83768b6dc56b17e55127aaf1e9a1105b9bef22b7470dfad5e4c12c234cea0abb25777a394ea4928ccb808aab88caa26ce2413633e76d89dc8eac4ec7c93a56c35537770c1a02d66e79a2837b3af31efba2b8c7f29c84dc06c19d82d62a90c7894271aca212b27a06530f300c59743e3598e619ae9178f14fbe1b7518d78754"}}, &(0x7f0000005540)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0xa, "cd27"}, @main=@item_4={0x3, 0x0, 0xa, "9098f4eb"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x2, 0x0, 0x9, "db1d"}, @global=@item_012={0x2, 0x1, 0x3, "b1cd"}]}}, &(0x7f0000005580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x83}}}}, &(0x7f0000005880)={0x2c, &(0x7f0000005600)={0x20, 0xf, 0xec, "fbbc39c07704e9a19246090db389be1838918372104076617d4f82384205cacaab0b199dcfbd0e732f5767854b9964861149ee810ad745b4c94be0cb1831242fdabb3cd11f9b55f10d8e8cdfb60a0106d3f8eb6e4c5a08de83d518021ca82fdfb7a0e11bb34010774f9bf47f64ee92c7251081fa58371c965e527dc3e2c1706af0b14dbf1c8a6993bfaeb2c42523cbbde5121f03a732b198770bc9bf66e703b364df362c4779ddaec399bd1573dba41a4bcd375dc92dd3c7d9bbff2b6b43843b56cbe1ac8d48d166144dabcd1af88d497607eac6c94254f056dd5d5a51431bd0215d45e57ba53a59bd903d52"}, &(0x7f0000005700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000005740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000005780)={0x20, 0x1, 0xb1, "9153ec28849210b8b717a50569f75eafa6a70f6460e58d807ed33912edc4a92032a18b7b25d60c459616c5541ad1794fb70ea499cddb9f6f7516d49f2fcdd3257ce362ecf81f47e454541b63f3ec10bfd0993606c448b8644c83bc7a4c04b834acd30ee182be20e85e6a1f41f6af4f08f39a82c17c3940f816a8431dd8da1fe185457f687f4b42aee72f5d8e0b6ee2e2c80830a72c884f42d8f7b0052c79ee5b9ed57b6c31c693cad44b27f31cbb549c82"}, &(0x7f0000005840)={0x20, 0x3, 0x1, 0x5}})
syz_usb_control_io$hid(r6, &(0x7f0000005b00)={0x24, &(0x7f00000058c0)={0x20, 0x0, 0x7b, {0x7b, 0x5, "2ef3763886465aa9cf6e6527c73cf061b60672bfb67c6a4f38a46c9df4d21b79984e09fd64f595d6746d76f2d51a788e5676570055fa904e5c4b97659811fcd9fdd18322435e5af5284e843e4e115e01340f03591cf4f8d978908e44974c08d60ff2918b1189202bf0a3aef1e3f5325d4649a63946af7ea814"}}, &(0x7f0000005980)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "f96eb9debcc130708904bcb29e47e900dea88f80c4146a10c004f124c488a61cde4ac1425f5cccf9ba4fa45a6eab96a273ffd140359f4d8c28455a95e666529108318666d0dfe4ee9194312ff207a343d4b9c3aee03a55d607438c13f89305f739087b3a55e07d7304be7e3920a62fd19f906c9f9feb27934336214a1301e746921b0f2640e2dc226f3e78d4d2bd4128c57c07f2d538a8f0360cf78e8bef915afc9f147b2b968a74627d6f3b4b9e4e8d49274257b4f001175a750da1b4efcf84de124c6bea33a570465e86ba14c5385febb8d8293dc7a77fb426d7d4dbcd10b425acac0129fce7656b"}}, &(0x7f0000005a80)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x6, "43d5a7e1"}, @global=@item_4={0x3, 0x1, 0x7, "c39a980e"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xb, "c38142bb"}, @main=@item_012={0x1, 0x0, 0x9e8801b1725878bd, '6'}, @main=@item_012={0x1, 0x0, 0xb, "d6"}, @local=@item_4={0x3, 0x2, 0x5, "a30600e6"}]}}, &(0x7f0000005ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x8, 0x1, {0x22, 0x118}}}}, &(0x7f0000005dc0)={0x2c, &(0x7f0000005b40)={0x0, 0x3, 0xb7, "75e8864b56fa8f54948a5de4e7ff9d8f6b8f0fd073df09af6eb54e4936623b94ec1de859619cdf21a8830622606761d43b4dca8e31dac16574a055a6a86227651d26a73260c8af0ba84510237d65304078e5ef3f911c0b49573eeaf798c751072c51bb623fbb0ae1e6aa8650697c975789d6cf7984334f9f85ee40b5467cd36720d80cdfa62c63e919ac4f61c40d022984953cfca30a0115dcb21fc1e07852b5a3a430dc4ea2b3013b353c68a8cb3db81feae7c8f36ea4"}, &(0x7f0000005c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000005c40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000005c80)={0x20, 0x1, 0xcc, "aaaf14822f0e42a1b8aa904013a6b510e2929d5290ac1d6d2917d11009f5227e41d5f10feee065a1cff6a394ac03b8f8c4620c5d192c7febd1404698a22e11908d1e0b6a2cf92e6008f32887cd3456d837e3144e724ef8bfa281905398778fbd5471b114ab15301d8b38468b94ef0410dff2e9b9a66fed90a62fd13330e0c3e2f2ecda71348a97f3bc964d19aed5a49d69cf56254b78546c73cc8cde8244885513c49293cb740ccc108566716192115b9a4d86497178fcbfcd79d4ead160cbc56aafab2e239169ec12dff5aa"}, &(0x7f0000005d80)={0x20, 0x3, 0x1, 0x5}})
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000005e00)={0x33, 0x7f, 0x0, 0x0, 0x40, 0x948})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100100000040580400010902240001000080010904000002030002000921fd7f000122eb00090581031000"/54], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100312a9ba403807ab8613f30102030109022400011df7d0021fee2a0202ff47d00309050200400026000e09050404ff03010309"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000400)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xa3, 0x33, 0xd, 0x20, 0x17ef, 0x721e, 0x21d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x93, 0x70, 0x1, "", [{{0x9, 0x4, 0x75, 0xe8, 0x0, 0x9a, 0x1a, 0x62, 0x6}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="8662e34869d2182d1e5ec29a0829fc63f3ab1ae5eb4d632ea52a4fa307c603c82d48e7dd14a6f83a450263400bcd9c3fbbb86c6fcc6cbe4e56511a117c5ddd1852d1184c475fcb4d4728fc40f1f01204000000f32b82d6aec1541c4d04ae7e92c43891c803c5d7dd237c36331836aa6526f8d732f4ff3dca71a6abe98886d776852c2ee3092ba4c5f9bc8a39c3f3fdb83b5320609ba609e309f30078cb4493cc4e6cbea01491dea67fd6c4e0b9faf7c0caaa697530b043bd07dee638cc3e8a5569344bdba0867e4ca1b1c51c0e9ab769055b38465abc7ccd1b86c710"]})
syz_usb_control_io$sierra_net(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="2008230000002323f59d5125618b24852ea5cf1169d6f256e619b22adab6dbde75d57b4a79881bd97435811d1d35f1ab2fd2082d4661a2"], 0x0}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150026860c869db4e87ee96379af420ac0501856a9301020301090290fb8c6c34dd7aaa0001024060070904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40c}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "1a92e9fc244da1a6ef26b27d7492e1ad29947f83fa175e8e903e60f667f5ea82f2a23a9d02403a19ae62a176fe2edcd6f6897ba30f8a60cb68cf9e6f0d5d23b18c8f58a40b4be8f09bebbe20076c74f7923d30cd21a120895bfa9272dd66f862d2d566ed4f3b3b9f85a4474bc5885f7b33858d91a9f1cade913e2b9311d9"}}, {0x3e, &(0x7f00000006c0)=@string={0x3e, 0x3, "74f28227510f92e58f703bbdec53eecd5c002ddb96375219ed1ba3605cfd48e405fd8b327f880674a51f1903bb76554b72de32fb2442a22b78f73ce1"}}, {0x4, &(0x7f0000000700)=@lang_id={0xffffffffffffffc3, 0x3, 0x2409}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40e}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0)
r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05140272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_connect$uac1(0x3, 0x79, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000106b0003019120020904000000010100000a240100020a0002010209040100000102000009"], 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000900)=ANY=[])
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100100000040580400010902240001000080010904000002030002000921fd7f000122eb00090581031000"/54], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100312a9ba403807ab8613f30102030109022400011df7d0021fee2a0202ff47d00309050200400026000e09050404ff03010309"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000400)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xa3, 0x33, 0xd, 0x20, 0x17ef, 0x721e, 0x21d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x93, 0x70, 0x1, "", [{{0x9, 0x4, 0x75, 0xe8, 0x0, 0x9a, 0x1a, 0x62, 0x6}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="8662e34869d2182d1e5ec29a0829fc63f3ab1ae5eb4d632ea52a4fa307c603c82d48e7dd14a6f83a450263400bcd9c3fbbb86c6fcc6cbe4e56511a117c5ddd1852d1184c475fcb4d4728fc40f1f01204000000f32b82d6aec1541c4d04ae7e92c43891c803c5d7dd237c36331836aa6526f8d732f4ff3dca71a6abe98886d776852c2ee3092ba4c5f9bc8a39c3f3fdb83b5320609ba609e309f30078cb4493cc4e6cbea01491dea67fd6c4e0b9faf7c0caaa697530b043bd07dee638cc3e8a5569344bdba0867e4ca1b1c51c0e9ab769055b38465abc7ccd1b86c710"]})
syz_usb_control_io$sierra_net(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="2008230000002323f59d5125618b24852ea5cf1169d6f256e619b22adab6dbde75d57b4a79881bd97435811d1d35f1ab2fd2082d4661a2"], 0x0}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150026860c869db4e87ee96379af420ac0501856a9301020301090290fb8c6c34dd7aaa0001024060070904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40c}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "1a92e9fc244da1a6ef26b27d7492e1ad29947f83fa175e8e903e60f667f5ea82f2a23a9d02403a19ae62a176fe2edcd6f6897ba30f8a60cb68cf9e6f0d5d23b18c8f58a40b4be8f09bebbe20076c74f7923d30cd21a120895bfa9272dd66f862d2d566ed4f3b3b9f85a4474bc5885f7b33858d91a9f1cade913e2b9311d9"}}, {0x3e, &(0x7f00000006c0)=@string={0x3e, 0x3, "74f28227510f92e58f703bbdec53eecd5c002ddb96375219ed1ba3605cfd48e405fd8b327f880674a51f1903bb76554b72de32fb2442a22b78f73ce1"}}, {0x4, &(0x7f0000000700)=@lang_id={0xffffffffffffffc3, 0x3, 0x2409}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40e}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0)
r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05140272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_connect$uac1(0x3, 0x79, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000106b0003019120020904000000010100000a240100020a0002010209040100000102000009"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000840)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000009c0)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0xf, &(0x7f0000000580)="010000000080000000040000008000")
syz_usb_control_io$uac3(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "62649dd78b20cef2e16029d9dd4832acaf60193c6a7c4691422c07672e993451861ec165f85954a6f597831959d36b2816f04d4707350edfd406"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000280)=0x1b)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/204)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0x41, &(0x7f0000000480)="16f5bc0b35e3c940045ae98a05d502cee83049d838264b0eae0e0c13a4e3f31184068dccf7fac8752c43ee6e292dae37611e08d15471ed8be10b542020923ca803")
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$hiddev(&(0x7f0000000200), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0)
r6 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0)
syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="b9fcff003100"], 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000001080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x80, 0x2b, {0x8, 0xb, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xb0, 0x7f, 0x1, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x2, 0x7113}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x6, 0x4, {0x8, 0x25, 0x1, 0x82, 0x30, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xe8, 0x0}, {0x3b, &(0x7f00000014c0)=@string={0x3b, 0x3, "cd49756647669d90d6638c755d22e62525f402e4915dc176eae010bfc7218cef492f5552742c6900feeae0578ad443bd30c21a9af129a76b44"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_ep_read(r0, 0x83, 0xde, &(0x7f0000001280)=""/222)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x2, "e676"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0)
syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a2501000000000000000904020000010220000904020101010220001624010100000000010100000000000000021000000006240201021009058209000201"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000001540)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000010ff113133000000000001090224000100008000090400000903000000092100010201221c000905810300"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000f40)={0x24, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000001040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1)
r3 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0xb0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6a, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x5, 0x4, {0x7, 0x25, 0x1, 0xc, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x4, 0x2, {0x7, 0x25, 0x1, 0x8, 0x9, 0x5}}}}}}}}]}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x5, 0x1f, "bd911c60", "0100"}}, 0x0}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001200)={0x34, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2, "35b3"}}, 0x0, 0x0})
r4 = syz_usb_connect$midi(0x6, 0x40, &(0x7f00000003c0)={{0x12, 0x1, 0x420, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x8, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x44}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x4, 0x3, 0x0, {0xd, 0x25, 0x1, 0x9, "8e0e6a21653623b21a"}}}]}}}}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x0, 0x3e, 0x9, 0x10, 0x5}, 0x5f, &(0x7f0000000740)={0x5, 0xf, 0x5f, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x3, 0x6, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "98f998f543114fa86cdf4b397edda5b8"}, @ssp_cap={0x10, 0x10, 0xa, 0xf, 0x1, 0x80, 0xf, 0xcaca, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7ffffc0, 0x0, 0x7, [0x3f00, 0xc0cf, 0x3f00, 0x7, 0x3f00, 0xff00]}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1007}}]})
syz_usb_control_io$sierra_net(r4, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x20, 0x2, 0x22, {0x22, 0x31, "1b7a518398ca0c1c75ed876fd1b7db8965e55d88012c577c3379172a81c5c9a4"}}, &(0x7f0000000880)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "7ace18db5e4eec99e48db726e70844da40687901540844c503247d14326c8390f8ed0ca455b19d1d0952382c8159e0f1a43ea9292b57feb97b93568278b60632cf8b62b8218c1c80eee24b44b4b1b7b610e169de8af4b8497171a1015afeca91a7ef6a1dad313213cd3033fe478688511f112bc9edba5ab692b97b4d8422d0a5a36981a94fdc48c6652b69057d4086c6e366627e13958c8854dddb19e298876cad6b4f352fdc13446e5f215f970ada2e8204e5f8c6e22309c81bd59357332d5de739986d510f3f2c45a289e65f5648aef166a70c3d2c313a163721b7318c265013bd28fc6902ab62c0e5df75a4905f4f2c4ed548d396"}}}, &(0x7f0000000f80)={0x1c, &(0x7f00000009c0)={0x0, 0x0, 0xfc, "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"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000400)={0x21, 0x0, 0x4, "4c50e03c"}})
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000001380)=ANY=[@ANYBLOB="0030c7000000c7210af1c5cd9f4425c53f4a965557f10ab7069d974a295ae806048e64bd8d1daa6039e394b4beb7dc6300a4ebfffc01d9f2a5d5fddf657e1b0dcf01e29f48832a1a806543e0d9f5adafddd2d96d01d599f500d3cfd55339f6f1bd292921c837b6574a46107f79b9ba6f69124969b8eed3a479c81db9bd9853018789ce3f4431a8f1a387fc06ecf78ce8e3499f5f6a65dd39a85efcd92d79a8470cbaec6049841ac86ec857b2f35d13aed15d39d23fde5cfd442dbbf3e82d4d02e44cfa9ac327f1b6e3823b9a0f9689ca606d0e080000000000000000"], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ef}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x6, 0x3a, "140e9611c6d60bfeb632c3794628783df24e907acbb4575ad1b54a2a86aacf396233d4f4572ec3217e009acca966f219ae68d4f63b1f9c671b56"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0xb02}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x30}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "4705ce516f34fbfd32b46f04e52208bb15c16bfffe391eb6722161a24a02692c015c76c99eac58be2e411ec6ee40f7"}})
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x10001)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000440)=[0x1, 0x9])
r1 = syz_usb_connect$cdc_ecm(0x6, 0x6f, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xa, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "619fea9a5b55"}, {0x5, 0x24, 0x0, 0xb252}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x7, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x28}, @network_terminal={0x7, 0x24, 0xa, 0xc, 0x80, 0x8, 0x6f}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x80, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x170, 0x1c, 0x6, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0xfe, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xbd, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0xb2, 0xa, 0x2d, 0x8, 0x7}, 0x55, &(0x7f00000003c0)={0x5, 0xf, 0x55, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x6, 0x4d}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x4, 0xf, 0x3, [0xff0000]}, @generic={0x39, 0x10, 0x3, "ceb10b86e8b1be2739c657eed86eb0276f800276e3728f0971848cec6e4271b22010947ca1bca1ad738e46732b738648daa1d5548cb1"}]}, 0x9, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x56, &(0x7f0000000780)=@string={0x56, 0x3, "243bce7cf48060c9e34478d8566fdaf1067a4fb5f1ac87c3739df7e45093e70016f4c38d6ad509342e9fcdccd398dbb7c71f674a5bd961dc28b050b4e976360c60d190b90a752d12db8bdde18bf7801c9d1997be"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc11}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x814}}, {0xc2, &(0x7f00000008c0)=@string={0xc2, 0x3, "33edefcdbd90ab0f7653a44a819e90333cdb968fb24af5a77593ee059ec03110206e4e4755d40101c4753b88547901a29af03a6d984f27e67b161ac2b530a9553462ce36cce71b0fab2995c2bc5fd6948739ef7dac0440c60d6050600362d7db93fde34d8974722602f1091a17e28589449561b397f73d8640b0431e4b8c810228adf4952fc468b403c7d12c447f6a7325ef27227aef191492ea05ee4e1a17b75fda53f8061883de565a0d1efadbb37b3dc02c4b3ccca1591071704a570cbae3"}}]})
syz_usb_ep_read(r1, 0x7, 0x26, &(0x7f0000000a80)=""/38)
syz_usb_connect(0x3, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xdb, 0x46, 0xc5, 0x10, 0x4c8, 0x720, 0x4c06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x2, 0x3, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x69, 0x2, 0x0, 0xfb, 0x65, 0xbc, 0x8}}, {{0x9, 0x4, 0xa4, 0xe8, 0x1, 0xe, 0x1, 0x0, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x29}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x7, 0xa, 0x3, 0x9, 0x3], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x1, 0x5, 0xe}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x4, 0x1}]}], [{{0x9, 0x5, 0xf, 0xc, 0x8, 0x10, 0x7, 0xf8}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1004}}, {0xe6, &(0x7f0000000180)=@string={0xe6, 0x3, "23005427c3f5e492ae486011c0feee13477ac3f908a2cc3fb4cc45dfbbd142c9d08cf3f586970de184436f95453a883a8fd19196784246cbdaef4ef21aa5dfad40ecf7b1eafb74eddffcfa957c09e1178ed9790aadba2561f6b3b4c53544e52404788769c3d6cede6ef94cff8b378df10a1aa4cd31fe1a5de7ef82cf534c8a05e6b5e12cdb317546833a726d16609384931008af364e50101bf1517c291fdef0762bd5dbc49ba14028a9a0725cb04c5fe8367bd222cc4e8df49893b7b304c6d8f2c13421503be175ed424906da6df3e7cdd102ed6c6dcf4958183c174a60998c1844a22a"}}, {0xee, &(0x7f0000000280)=@string={0xee, 0x3, "d11431940821081186798b297ed02b310e5860de42609e1e4693b08f37739cfd1110faf6dbe44e8f307481e31105230c76cdec926d4f1686bbe6629c08912387a62047e321ca3cf1277d30ac0554afcad2bd98b23668277b3f9c96b68146b5056450a8ab77237b62902c23a8ba51959d019a752e39398ccee17d1b1b5997ff68bba30e9dc202f18fc5119f6f6a596c92fcee6b362ad58001c57751b89b4b0ad864fbe4ecc6e2cdd54d3b52e642dfa5f8d6c45bf2d210fb0ecf8913603c9dc193c9dcb73c828552d0bc607cf26e8dda222782a637386fdb4bd0e7ec4a9381ab28898ad176174b775fa4595479"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0xf0, &(0x7f0000000480)=@string={0xf0, 0x3, "6f604ec25c1323947085550f374d1f695faff779860f25be4d4286730e7267fe4912506ca491b0fff985ad6145b94cc1a50240ad9b6b68d54cbd5eb001c24278c54a18fd89467cb7b7ef188c4d00ddfe135b731d4c800791db86bde7984bcbae9b5edfe08bd37d82ba98367d4cdeb0019234a6bf656551935bef94ff6626f92657158acb7323bacdff264d5a30bea2f36b4065d3ea9fd487d937cd859d9374488e11fb21a789cb57252452c04cfcd46e260ddec42a79f5f09e18eb64f1699baa59dd1e001d322c41d13585ee3b2df12367763e1f3714ceca289c216e6f29b0ddd411cc7867d0c526f4ba093f7450"}}]})
executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090583"], 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="bcea"])
r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x40, 0x0)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000840)=0x8)
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x60, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xdf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x40, 0xf7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x2, 0xc, 0x1, {0x22, 0xf57}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xfd, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x4, 0x7}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x8, 0x8, 0x0, 0x10, 0x7}, 0x6c, &(0x7f0000000000)={0x5, 0xf, 0x6c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x86, 0x4, 0x5c, 0x813f, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5, 0x6, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0x7}, @generic={0x38, 0x10, 0xb, "e0dc6c841489980726c8c03466be17869ee3272f83de8983e656f0d05b1ce6fbd28e72f7b894a8e87638d5ba3f8d5f996f1ff71891"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x10, 0x47, 0xfe01, 0xf}]}})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xd3, 0xd, 0xd9, 0x40, 0xe8d, 0x7925, 0xbbbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x21, 0x70, 0xe0, "", [{{0x9, 0x4, 0x7a, 0x7, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0xd8, 0xe5, 0x33, 0x20, 0x572, 0x58a6, 0x21fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x81, 0x80, 0x7, "", [{{0x9, 0x4, 0x55, 0x0, 0x0, 0x8e, 0x59, 0xdb, 0x9}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = syz_usb_connect(0x3, 0x50, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102000200042401000705820200020004240200070583020002000424030007050402000200042404"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010102e98a080000000c003d0e0102030109022400010103c00409045db9029793eb0b09050204200098045e0905080310000e0504"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x34, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000092df5510ac052692"], 0x0)
syz_usb_ep_write(r7, 0x81, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000d40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009041000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0)
r2 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x50, &(0x7f0000000440)=ANY=[])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x47, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x8041, 0x4, 0xa8df, 0x6, 0x8001, 0x7, 0x41, 0xdfe, 0x0, 0xeba7, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc704, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7c113ceef6"]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000f01000000ffd4f88a5d15168fe4d61088789c42a12ae63af783e5156decb7145e10896af629236fbfe29132805841a39d512e8ea6507afe433400d344654b88d15ba11924ccf160b100ddcbbdbd2cd7556239444a17c1978be8ecc591dc0b1b5badad8ed5b5653258"], 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010b40000102030109025f0003010380f40904000000010100000a24010000000002010209040100000102000009040101010102000009050109000000000000250100000000090402000001020000090402010101020000090582"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122350007058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff00a4089502810285210903150026ff0062089501810285910904150026ff00750895019102c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0}, 0x0)
executing program 2:
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201070000000020ac052403000000000001090224000100001002090400050203000200092100004401221800090581032000000404"], 0x0)
syz_usb_connect(0x5, 0x3d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xb3, 0x44, 0xff, 0x8, 0x65a, 0x9, 0xfeb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0xfd, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x84, 0xf, 0x2, 0x85, 0x3d, 0xc3, 0x80, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x5, 0x3d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xb3, 0x44, 0xff, 0x8, 0x65a, 0x9, 0xfeb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0xfd, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x84, 0xf, 0x2, 0x85, 0x3d, 0xc3, 0x80, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a00020102090401000001020000090401010101020000090501091000020e00c3cd8dbdaa9cb6e1d47cdb0725010c0040000904020000010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0) (async)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r4)
write$char_usb(0xffffffffffffffff, &(0x7f0000000580)="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", 0x150) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000580)="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", 0x150)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) (async)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20346b2bbd4c89c239cb3d860c16820100000090"], 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000008c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000940)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$hidraw(&(0x7f0000000440), 0x0, 0x418000)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
executing program 1:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022041d00000432a52375b7bf18e8b1ac6f6778a6729374e2ea55f9b3cb59e5e3f954559d9aec3731d45042867f58dc62553c1e7cea2ecc898a93412e4961a0e508bd336545665586d416fdc2102741598d5829f002b08cd9269c43569c4457c92e4e716846a1757c0613dc7d500cd9"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x6, 0x37, "2ffc2dcd77c7e384294ab2f7be31be45696d70344cb80fb9e3ff3aaffcc48296a9a42fe03601a82e28da24aa2f169f3994c0d27d2ee801"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "8fd3b3"}, &(0x7f0000000200)={0x20, 0x82, 0x3, "03daad"}, &(0x7f0000000040)=ANY=[@ANYBLOB="208302000000c8f27dafb45a41b7e07ce282"], &(0x7f0000000280)={0x20, 0x84, 0x1, "df"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "3bbb57"}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2d, 0x57, 0x43, 0x8, 0x413c, 0x81d2, 0xe539, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x58, 0x2, 0x0, 0xe2, 0xa7, 0xc5, 0x5}}, {{0x9, 0x4, 0xa2, 0x3, 0x0, 0xff, 0xf8, 0x2, 0x5}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040f003040040000102030109021b000101050102ff03"], &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1a, 0x0, 0x8001, 0x7, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x2, 0x10, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x977, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x40, 0x0, 0x1001, 0x3, 0x4, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9c2, 0x8, 0x7c}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x6, {0x8, 0x25, 0x1, 0x3, 0x0, 0x22, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0x0, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x1, 0x2, 0x0, 0x4}, @generic={0x3, 0x10, 0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x14, 0xfe, "14c454eb5a7e2f7ad7aa47951c8e9ba14ecca27d80359aac478a29e697f6b702c3863d4d2848dc68913ff6c793802a401ad66fb16a4dbce5366e1cc6600d9a9c34171e3894fb3581af1f53db09000000bd20c86c373a048a02634b8574c297a294a0aaa8f6b8f9ec2911dd8d78b8b9833bea4c7db6da996bed17eafb8f7aea45fb7f3d94e2e21a38b08b3382fe15052dcd0d3db7c54cb412c807fc7b7d000000000000000000000000e3ccf955965f3747ad4bdfcaedaff636f9997f7924d2ffc5bfa9b976e2e5fee3aecc03000000000000000a866193b4ed08787cd263dbc0bd5e878cc93d661f9fdf4cc77169faef2fd8cb973db7b1559ff6a47c4086"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x75e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x4, 0x164, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x104e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x152, 0x3, 0x1, 0x0, 0x70, 0x2, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x54, 0x7}, [@extension_unit={0xd, 0x24, 0xa, 0x6, 0x6, [0x2, 0x1]}, @extension_unit={0x11, 0x24, 0xa, 0x3, 0x1, [0x3, 0x2, 0x1]}, @multiply_unit={0xb, 0x24, 0xd, 0xf2, 0x8, 0x6, 0xfff7}, @mixer_unit={0x9, 0x24, 0x5, 0x2, 0xa, "639f09e3"}, @extension_unit={0x9, 0x24, 0xa, 0x4, 0x2, [0x2]}, @power_domain={0xf, 0x24, 0x10, 0x71, 0x6, 0x5f, 0x9, "6091751a8873"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x4, 0xdb, "e592", "1b34f3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xaf, 0x3, "dc0f9e06395b"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x1, "4576c0233332d58e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x3, 0x8, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x18, 0x3, 0x6, 0x2, {0xa, 0x25, 0x25, 0x9, 0x0, 0xfeff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0xd, 0xc, "11f43afc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x1ff, 0x0, 0x85}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7e, 0x3, 0x5, 0xb7, 'E', "185180"}, @as_header={0x17, 0x24, 0x1, 0x10, 0x2, 0x1, 0x2, 0x3, 0x4, 0x3ff, 0x5}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8bf, 0x4, 0x0, 0x9, 0x1c, 0xff54, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x80, 0x6e, '/88n:'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xf, 0x3, {0xa, 0x25, 0x25, 0x30fb, 0x80, 0x7}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf9, 0x32, 0x8, 0xff, 0x5}, 0x1b2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, [{0xac, &(0x7f00000005c0)=@string={0xac, 0x3, "822caab3749068a501ff75b167fdb77ccad7d09e98f9895fc470003f415a08b41e594d288f3dbe29f35797185d10ebecb069d7c573ce14bcb4ec7b23cf7fb73ea9e907b4849168f6ea8180637801d6d84bee2cdcc72ded5d7aa9bcda2f03d2fcd3c416551511588bba030eaaa1c04f6e81c3af06349b69989987f800ea103aec88e0acc9a22e5718784e1083cefebc05a5d6ec14f6fcf8cf060fe8d395eb4734c60edc425eafe13fb787"}}]})
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0xc0, 0x4f, &(0x7f00000001c0)="68c371a89d3ad78df4511f4e84b11614e4fc43c56707f0853a7bbf6f3b6aa552b103e6f946d8deffc8b60026e8890f0b95b940466a51e654da0db21f2ea4ec8b39b61874da167c51fabda524b36612")
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 4:
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
executing program 2:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c00409045db9029793eb0b09050204"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r2 = syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2], 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="201704000040549b3e"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x0, 0x0, 0x4, "047e461d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000007c0)={0x0, 0x10, 0x4, '8U, '}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x20, 0x8, 0xf5, {0xf5, 0x23, "caeaf99e8c0ba1f27a74d62d55302f8a2a677eba9e574f8afdc9d0718ede83545206ccbae9f06200717c0cfa48ade8bd755ba4862d33b38d6023c513d48adadff774d35fe63a819498c9bec7e7655316a6ececf413421f8c2e05f0e451f17f2ebbfa77302f21bdd0e47efa8f00b66de98acb4fab6ff96816a1cc14ef46fa1efbe5a7ad48dcf83454cbd6be6ac943bc825392a09fbef58ae83ea27be36b8ba53df3a99a5ccc2ec40dee84c49bfb2785545a7b652587ef5d7fef6d61c46574ea74b649f5adf9653dac7043a0d9a77179ffcc36b7c66ee93f9598baeba5af1105e833c0d7918a5a8dca60115ed5ab967c9d4223fb"}}, &(0x7f0000000900)={0x0, 0x3, 0xf, @string={0xf, 0x3, "33b5c66e98b0dcd89f1a508900"}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000980)={0x20, 0x3, 0x61, "afdb3eb4772a4c240ebed670b4c9fc033405809d90b293132706bccb4588756ba8dc381aecdb01b143f3f16112172e8d09eeeb21743ac0a7d07fbbf262c2f7ef2015e213314a104a3d7b7767d5cd510e9dea481a1dfe42d979899929d5de64a641"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000a80)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000ac0)={0x40, 0xa0, 0x4, 0x6f}, &(0x7f0000000b00)={0xc0, 0xa2, 0x2f, "06cf4c7167f2915056d63c84564cd67bbb5ac62de0b1a37d46910e467ec52e7491441bf96bf09831c36bbff8c640d7"}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000e04000000943a7a"], 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x2, 0x36, &(0x7f00000015c0)={{0x12, 0x1, 0x150, 0x20, 0xe3, 0x5a, 0x8, 0x5e1, 0x408, 0x3e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0xff, 0x28, 0x9, "", [{{0x9, 0x4, 0x5d, 0x4, 0x2, 0x56, 0x23, 0x4e, 0x4, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x0, 0xa}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0xff, 0x10}}]}}]}}]}}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$hidraw-syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_open_dev$char_usb-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c00409045db9029793eb0b09050204"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r2 = syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2], 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="201704000040549b3e"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x0, 0x0, 0x4, "047e461d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000007c0)={0x0, 0x10, 0x4, '8U, '}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x20, 0x8, 0xf5, {0xf5, 0x23, "caeaf99e8c0ba1f27a74d62d55302f8a2a677eba9e574f8afdc9d0718ede83545206ccbae9f06200717c0cfa48ade8bd755ba4862d33b38d6023c513d48adadff774d35fe63a819498c9bec7e7655316a6ececf413421f8c2e05f0e451f17f2ebbfa77302f21bdd0e47efa8f00b66de98acb4fab6ff96816a1cc14ef46fa1efbe5a7ad48dcf83454cbd6be6ac943bc825392a09fbef58ae83ea27be36b8ba53df3a99a5ccc2ec40dee84c49bfb2785545a7b652587ef5d7fef6d61c46574ea74b649f5adf9653dac7043a0d9a77179ffcc36b7c66ee93f9598baeba5af1105e833c0d7918a5a8dca60115ed5ab967c9d4223fb"}}, &(0x7f0000000900)={0x0, 0x3, 0xf, @string={0xf, 0x3, "33b5c66e98b0dcd89f1a508900"}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000980)={0x20, 0x3, 0x61, "afdb3eb4772a4c240ebed670b4c9fc033405809d90b293132706bccb4588756ba8dc381aecdb01b143f3f16112172e8d09eeeb21743ac0a7d07fbbf262c2f7ef2015e213314a104a3d7b7767d5cd510e9dea481a1dfe42d979899929d5de64a641"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000a80)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000ac0)={0x40, 0xa0, 0x4, 0x6f}, &(0x7f0000000b00)={0xc0, 0xa2, 0x2f, "06cf4c7167f2915056d63c84564cd67bbb5ac62de0b1a37d46910e467ec52e7491441bf96bf09831c36bbff8c640d7"}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000e04000000943a7a"], 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x2, 0x36, &(0x7f00000015c0)={{0x12, 0x1, 0x150, 0x20, 0xe3, 0x5a, 0x8, 0x5e1, 0x408, 0x3e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0xff, 0x28, 0x9, "", [{{0x9, 0x4, 0x5d, 0x4, 0x2, 0x56, 0x23, 0x4e, 0x4, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x0, 0xa}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0xff, 0x10}}]}}]}}]}}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac2-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007050102000200070582020002000904000105080662000705010200020003240107050202000200032402070503020002000324"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect$uac3-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x75e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x4, 0x164, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x104e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x152, 0x3, 0x1, 0x0, 0x70, 0x2, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x54, 0x7}, [@extension_unit={0xd, 0x24, 0xa, 0x6, 0x6, [0x2, 0x1]}, @extension_unit={0x11, 0x24, 0xa, 0x3, 0x1, [0x3, 0x2, 0x1]}, @multiply_unit={0xb, 0x24, 0xd, 0xf2, 0x8, 0x6, 0xfff7}, @mixer_unit={0x9, 0x24, 0x5, 0x2, 0xa, "639f09e3"}, @extension_unit={0x9, 0x24, 0xa, 0x4, 0x2, [0x2]}, @power_domain={0xf, 0x24, 0x10, 0x71, 0x6, 0x5f, 0x9, "6091751a8873"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x4, 0xdb, "e592", "1b34f3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xaf, 0x3, "dc0f9e06395b"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x1, "4576c0233332d58e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x3, 0x8, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x18, 0x3, 0x6, 0x2, {0xa, 0x25, 0x25, 0x9, 0x0, 0xfeff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0xd, 0xc, "11f43afc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x1ff, 0x0, 0x85}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7e, 0x3, 0x5, 0xb7, 'E', "185180"}, @as_header={0x17, 0x24, 0x1, 0x10, 0x2, 0x1, 0x2, 0x3, 0x4, 0x3ff, 0x5}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8bf, 0x4, 0x0, 0x9, 0x1c, 0xff54, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x80, 0x6e, '/88n:'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xf, 0x3, {0xa, 0x25, 0x25, 0x30fb, 0x80, 0x7}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf9, 0x32, 0x8, 0xff, 0x5}, 0x1b2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, [{0xac, &(0x7f00000005c0)=@string={0xac, 0x3, "822caab3749068a501ff75b167fdb77ccad7d09e98f9895fc470003f415a08b41e594d288f3dbe29f35797185d10ebecb069d7c573ce14bcb4ec7b23cf7fb73ea9e907b4849168f6ea8180637801d6d84bee2cdcc72ded5d7aa9bcda2f03d2fcd3c416551511588bba030eaaa1c04f6e81c3af06349b69989987f800ea103aec88e0acc9a22e5718784e1083cefebc05a5d6ec14f6fcf8cf060fe8d395eb4734c60edc425eafe13fb787"}}]})
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705"], 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0xc0, 0x4f, &(0x7f00000001c0)="68c371a89d3ad78df4511f4e84b11614e4fc43c56707f0853a7bbf6f3b6aa552b103e6f946d8deffc8b60026e8890f0b95b940466a51e654da0db21f2ea4ec8b39b61874da167c51fabda524b36612")
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$printer-syz_usb_connect$uac2-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040f003040040000102030109021b000101050102ff03"], &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1a, 0x0, 0x8001, 0x7, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x2, 0x10, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x977, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x40, 0x0, 0x1001, 0x3, 0x4, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9c2, 0x8, 0x7c}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x6, {0x8, 0x25, 0x1, 0x3, 0x0, 0x22, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0x0, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x1, 0x2, 0x0, 0x4}, @generic={0x3, 0x10, 0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x14, 0xfe, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$printer-syz_usb_connect$uac2-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040f003040040000102030109021b000101050102ff03"], &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1a, 0x0, 0x8001, 0x7, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x2, 0x10, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x977, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x40, 0x0, 0x1001, 0x3, 0x4, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9c2, 0x8, 0x7c}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x6, {0x8, 0x25, 0x1, 0x3, 0x0, 0x22, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0x0, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x1, 0x2, 0x0, 0x4}, @generic={0x3, 0x10, 0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$printer-syz_usb_connect$uac2
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040f003040040000102030109021b000101050102ff03"], &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1a, 0x0, 0x8001, 0x7, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x2, 0x10, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x977, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x40, 0x0, 0x1001, 0x3, 0x4, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9c2, 0x8, 0x7c}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x6, {0x8, 0x25, 0x1, 0x3, 0x0, 0x22, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0x0, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x1, 0x2, 0x0, 0x4}, @generic={0x3, 0x10, 0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040f003040040000102030109021b000101050102ff03"], &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1a, 0x0, 0x8001, 0x7, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x7c, 0x22, 0x7f, 0x8, 0x1286, 0x2042, 0xb491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x97, 0x1, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$rtl8150
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x22, 0x18, {0x18, 0x6, "984abe3bbf107aec0f7fdbdcbf3102a764e4877a2702"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0xdd, "eaf4652efbf1bba2c5384ef53fbdb85369a908cb0b1db2449c74c507a8069f1b05c031b97ff02c62900444db53dfe33f0560eae0c912a63606cb4a30b3276ce1c91dbff06b29838d8b0cd37cac50f56a94dbdcfd890590cef6c6994dd90851569a40642391d849b708c44c7863e4d28f3e6a4ed9e3001b0885eab74c881447a4a80342bb4a7823b4dcdd3f828631127dcdb021abeeda1da877fb0d9e087cce85dec2ed141936b67249d332a090daf2f3e8105978d773608f944f02da713d8130a28e8cda2ae467de6740f66e017628aa34fa1af4d341dedb1941060b71"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000780), &(0x7f00000007c0)={0x40, 0x5, 0x6, "b087bcc76505"}})

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000480a15011200000000001e8d01090224000100002001090400088203000300092111000001221800090581030002fc"], 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write$ath9k_ep2
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9b, &(0x7f0000000880)=ANY=[@ANYBLOB="0300003946ee6cc82c13e199e6fbcded1aa6e1a80deadd78bbfce1cd44b82ec74e234f6eeadb6dc80810bbd12963e56d1b8f48291fd14d4e86e68c04"])

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
syz_usb_connect(0x0, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-ioctl$EVIOCGSND
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000940)=""/65)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"])

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="f8"]) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, 0x0) (async, rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (async, rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB])

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (rerun: 64)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (rerun: 64)

program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
a never seen crash title: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req, ignore
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000900)=ANY=[@ANYBLOB]) (rerun: 64)

program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
reproducing took 1h35m11.798269725s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:467 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17cb/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888105ace071 by task kworker/1:0/24

CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:467 [inline]
 rtsx_usb_ms_handle_req+0x17cb/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 37:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 37:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6509 [inline]
 kfree+0x20c/0x650 mm/slub.c:6802
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888105ace000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888105ace000, ffff888105ace800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105ac8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3367678238
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7418
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 acpi_ds_create_walk_state+0x95/0x300 drivers/acpi/acpica/dswstate.c:518
 acpi_ps_execute_method+0x2c1/0xe90 drivers/acpi/acpica/psxface.c:134
 acpi_ns_evaluate+0x640/0x1670 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x420/0xe00 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0xdf/0x220 drivers/acpi/utils.c:260
 acpi_bus_get_status_handle drivers/acpi/bus.c:82 [inline]
 acpi_bus_get_status+0x1a1/0x430 drivers/acpi/bus.c:111
 acpi_scan_init_status drivers/acpi/scan.c:1859 [inline]
 acpi_add_single_object+0x127/0x1ab0 drivers/acpi/scan.c:1892
 acpi_bus_check_add+0x2d2/0x920 drivers/acpi/scan.c:2175
 acpi_ns_walk_namespace+0x4cc/0x760 drivers/acpi/acpica/nswalk.c:236
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888105acdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888105acdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888105ace000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888105ace080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888105ace100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:467 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17cb/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff888105ace071 by task kworker/1:0/24

CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:467 [inline]
 rtsx_usb_ms_handle_req+0x17cb/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 37:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
 memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 37:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6509 [inline]
 kfree+0x20c/0x650 mm/slub.c:6802
 memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
 memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888105ace000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
 freed 2048-byte region [ffff888105ace000, ffff888105ace800)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105ac8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3367678238
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7418
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 acpi_ds_create_walk_state+0x95/0x300 drivers/acpi/acpica/dswstate.c:518
 acpi_ps_execute_method+0x2c1/0xe90 drivers/acpi/acpica/psxface.c:134
 acpi_ns_evaluate+0x640/0x1670 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x420/0xe00 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0xdf/0x220 drivers/acpi/utils.c:260
 acpi_bus_get_status_handle drivers/acpi/bus.c:82 [inline]
 acpi_bus_get_status+0x1a1/0x430 drivers/acpi/bus.c:111
 acpi_scan_init_status drivers/acpi/scan.c:1859 [inline]
 acpi_add_single_object+0x127/0x1ab0 drivers/acpi/scan.c:1892
 acpi_bus_check_add+0x2d2/0x920 drivers/acpi/scan.c:2175
 acpi_ns_walk_namespace+0x4cc/0x760 drivers/acpi/acpica/nswalk.c:236
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888105acdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888105acdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888105ace000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888105ace080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888105ace100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================