Extracting prog: 13m49.748872508s
Minimizing prog: 25m6.280457248s
Simplifying prog options: 0s
Extracting C: 2m19.691172149s
Simplifying C: 9m4.248900767s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x68d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000045673408d016a91014950102030109027b0604000420030904ea040dff"], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010085f15bae2a3a010203010902120001000000000904010000c0dafa009ec01f7dfac6c6bd475d961e3e470da5ed2dcee7f0932f103a827d2437134a1d48f6dfde98533bf6f2382b4f9f2346e927599ab4b119c778a8428b39d1084179"], 0x0) (async)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010085f15bae2a3a010203010902120001000000000904010000c0dafa009ec01f7dfac6c6bd475d961e3e470da5ed2dcee7f0932f103a827d2437134a1d48f6dfde98533bf6f2382b4f9f2346e927599ab4b119c778a8428b39d1084179"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x40, 0x0, 0xe, {0xe, 0x7, "9dcd66a9ed6d224f3b13c640"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x15, 0x73, "0f7615d3a74f20374fca49d5445d53cc08cb39e500a9ddd39d6d7c1acc270cde3fba81b4f6acb7f071760c50769e68cfabb94f6f5f866a8834b9ac71ffab4c3eed1dce0cfdd5f03530208ad2c3e4ff5a527054a7de21753f7942fc66230a8f296cca8da50d34dd8815ff89fbdd4f2d9530a9da"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x58, {0x56, "c5d2dc00cefa071ce139c22b847cc1fccf0063eac76010fab0e072c20ac1c70dcd5e4f4af196ce53ffd19d3603b023054f6595909507a725b609dc2dbdd830db7eea393123aed42d2b247771bea5fa591ab7fe58935f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x3}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x14, 0x1, "10"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x14, 0x1, "10"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$evdev-write$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20031380f5dc8fdf7f02794d0074d9b62bc3d23ddc78c2b24c1c8d70ebacf7080000009e38d1d01dca01d74b01689403ba1d3b222fc00467"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(0x0, 0x0, 0x822b01)
write$char_usb(r1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x6, 0xc9, &(0x7f0000000200)="1314784f13909c9635b63bc3ddfb7990f0621afa005d292d82e24678a9454c420b2dacd775c40eb19a442d803ec6d625869db652a679b221048ac65bb53ddf3fa8b1e1de221e47ef47776afb700213c758f7aa1c61e21ca2e35f0f4efbfa2bffb758c83f9252df475b1235d88043327e56b9dc03ad4ec0ab6bb9e451dacf26d09f2ca1ea602e9093a97c81e976b18817fca753ca5ae94921a340dcda3b644ee91a7aa316ec9501c7934d4e4fc6245e81f8e935ad996e5c207e11fecbed59a9c82b173e45fbc3957e04")
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c0000001c21f5b3da6207982802"], 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-syz_open_dev$char_usb-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_usb_control_io$printer-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_open_dev$char_usb-read$char_usb-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000004023123f00000000000109022400030000a000090400000203000200092126e4000122450009058103937beaa7b6e364794e25543e0002000c03214f5239efd14fc6452c482cc5f452bfa60c39c0eaf9c48524e01e0ac6ddfe9cf18043cfb9f806ddef563b92a07ead587636"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x45, {0x45, 0x11, "61639c545d2ce9daa7602630c686377369efa824c3379300000000b0d2363bdd25b77c5b7708dfd51207b2908fceb485a8995d91250100ff9ebab19ba6613600e553d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r5, 0x5b02, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x62)
syz_usb_disconnect(r2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 29, 8, 4, 8, 27, 30, 34, 8, 28, 12, 28, 29, 19, 2, 6, 22, 8, 3, 4, 8, 16, 10, 6, 5, 30, 10, 7, 33, 2]
detailed listing:
executing program 0:
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x60fe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x35}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x87, 0x80, 0x8c}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0x1, 0x7, 0x20, 0x9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x54, &(0x7f0000000100)=@string={0x54, 0x3, "87ff41870f8955061b5cbe8ee25b55360163420511b99c2636c74b91029020abe1ec942240f1b39a5d937f0184e19c3d67bc0b5a6aca8d7f9c124260f0999a519059205d76dd84192d4abf28f45f38d1351e"}}, {0x93, &(0x7f0000000180)=@string={0x93, 0x3, "f902df0da787f004be139c6ed50eba6b843541cf54c6b8e2754b4b3a6ba6ac937bd53c90a8e3a5ba1400b82eaa8e633ec778390a8ebf38f99a0824af850e5894b43ab14ceccf82b4d783d5da7b46417971daad7aeb8eec6cc3ab31ffba99359304dde3521ec7a42454ac7210c8d7e9da0579742ae5de178b7da2af726f81541222f5edf8b7fa9e27117bb6246035dc6af2"}}, {0x63, &(0x7f0000000240)=@string={0x63, 0x3, "4b57d2747f01745e0d13b98c0fc7af946ed14d228b1623b6d5ab9dccaaf73f4ce5b2d1ee868830b0d8981f77a1f1318fe3c8e7c46fe417847aa42d7c018819168c840150e9fd05ec5aab684d5016490994eb066d91049a733642adf5ef409ea26d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff09058503"], 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000ffffff11313300000000200109022400010000c00009040000010300000009210900000122a000090581030000000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffef9}}]}}, 0x0)
syz_usb_ep_read(r0, 0xea, 0xb8, &(0x7f0000000240)=""/184)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000038ff4f40d3131932677a0102030109021200010000000009040005"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001000)={0x2c, &(0x7f0000000e80)={0x0, 0x14, 0x4, "0f4a66e4"}, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000400)={0x14, &(0x7f0000000880)={0x0, 0xd, 0xf9, {0xf9, 0x28e36c334d473ab3, "184ca997927e1603b03afdf6498bca19652d6379723ee5992c3973308b85a35912863ff0c7eb943a4c64863f77f1c4d43f1007713eeebce0b9f91011deb66c1ff93582292126b4decc42e8e3538100d15466f3ad620df07e0f32f72b8243a7c6023e506d9ef1bb541368f8a9333360b5b034ec368decabb0b068ac3d7ba489605b29d25953fb40a1216762a0e1ec8fa8442f061b8e5d02b7bd72de5049defcabb1874940cc7a9b4d4742d2119d928242179043c88e96880cb25cd1df3f4bbf5c9edaf5be00a220c116845842876416c7bc1d0ad7de26c535683ec80481daff61070000009d8a5819b34e93651e52c53d639f6723c00c61"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000780)={0x0, 0xd, 0xe6, "01b6904a55611d6c2360079bcdd26dd22ce67b8e298bfb2865f8aa85650df496917e98939f6ffb93383a8567880071ea657fabfe14474a760d54b0ccc8150737db4515b06d97b7c1578812be907cdc033afd4febdc9a89ea2178ba4ee072c561e402decfcc9626a54546b5771cb62181548847ef6f4c74f8f65f86f5e2993f28a080d029ff9b9a485157615b8e4ca9f06984e58c2ea7f5c59ec039b1e3dc6e35e461ff0b441183543da47b57722d13dec38f67ab4590eefd00a7817726c5c127ef1d2385135b935ad004d1a55777cbb9c5e0d9f6b29eb62251c4db66c6db253325a1feb57cee"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x60}}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async)
ioctl$EVIOCRMFF(r4, 0x550c, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0) (async, rerun: 64)
syz_usb_control_io(r5, 0x0, 0x0) (rerun: 64)
syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x45, {0x45, 0x0, "a7ea3163fd3b651763d80333dd08e13e0962e15c69cc465ec4c94d51a60f84a4bfa30c43ce1055c03ade799b8692277d8ad7129a6ccb2acddd085986660b01db3d77b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0) (async)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r2, @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x23, 0xb4, 0x41, 0x10, 0x19d2, 0xffb3, 0x563e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x4, 0x2a}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0xa, 0xd}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x60, 0x15, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, &(0x7f0000000980)={0x40, 0xc, 0xcd, {0xcd, 0x8, "599331d58929b1f63f1d08f9006645cc639ef0b3b12cd7dec5f5e02af3021c867e1fb9945e27d4cebd2fe9de37ec8f23ef7aa2330cbd9f2e0ee8b97b2a4b9f04d55a322d57b09743aea4e7baf131d8b3e71db12d6b6341284cb799e72197a0d39df9fe864afcf884ae561ee3e518b58e0bf1bfadd6a281951978071f83b27de86801150e36e3211d5424dba1587d0a9c39b1b396c710fe7fcb00c6837e5b59c773bebd3300138f8e309ae92726c555421a70680e311e06b4219c218cfe337abc51fb64eb6d0e2ab64fad7a"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x0, 0x24, 0x67, "19d96e30a9f4cbe0513f13a415d7e154b08393caa0bc773cc309b4988b538e4c991f7574eb5ef434b2b7005cdc2907dd7ccf0ed09edd7d19959eb2bf591624920d93e054d9311275d43787d01fccf49e87ca6647a91e6a00eae5048c073fac7d0416b72b5a609f"}, &(0x7f0000000740)={0x0, 0xa, 0xfffffffffffffca8}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x9, 0x6, 0xfffffff2, 0xe, 0xae, 0x7, 0x6, 0x10000, 0x7, 0x3, 0x0, 0x5fc}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x464a}, &(0x7f0000000840)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0xe50}, &(0x7f00000008c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0x5, 0xac, 0x10, 0x45e, 0x28c, 0x1ea6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x7, 0x0, 0x5f, 0xf9, 0x95}}, {{0x9, 0x4, 0x6a, 0x0, 0x0, 0x99, 0x11, 0x7e}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x60, 0x30, 0xa, "cc21bc6489413124094c"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6f}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022b00001000000009046efd82deca6b0f128739509f043574bab54af25bef8b3cadd86d096862e25228ee0ecdc1d8d3f75cf901f968d743d1a2b83f33c2f1d3f9d40d4eedb1e76ff012f248a3910b4cda3588bb4f5fbd6374f319573094acc7fc4309835c85f17549a3cfd20c9c0509fd"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x0, 0x16, 0x26, "c3869107b63aac3e2472dfaff76f7ee8e504b31c9d44187c35f6ea36040f5fb80dc90900c4ee"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x83, 0x1, "10"}, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x69, {0x69, 0x22, "b105e50e9f2e17860c231bd53548bd9ab12c2dd35939901275795c3324d1fdd833f9b6a0c36ba8597e07b8f1eea7ea83c070b34bc3bec089ded0d74032991c135843776c851156aeebcff93048fd9aaca71d3960ccac62f9dbbf622d27cd35d8a5024b0ff695a3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0xe, 0x73, "aa02641d384d2cf5242dc16aedb126f41c844765e1b7ef2f112ccdc42fc72efc1622b731bbb5f205ed9feac1acfef594ae075b75e33a79dedf5a1f72069e53a0be87cb56fa9e13edda4bf5b15d43b8a54da898333dd1ae0d27323aeb7e3bf2012b8862bb9fa7a8a9e48ad4a9c85b865bb34702"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000340)={0x20, 0x0, 0x79, {0x77, "3afb949f569b7cc892db4530e75a94b95dd5d0bf0cbec7d0556efbf6c622c3776b6177a377f170629023158fdd84fcff5b6d720096524cbb92b4872f275fd3542355339947b88bcc7fb9af58974c3fb9c8c702537e926be403ae7c352bce50e8e1638ae88c41ae61452558399e607dbae0274c92d67282"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x5}})
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_connect(0x6, 0x9f5, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x1, 0xb1, 0x27, 0x10, 0x45e, 0x451, 0x47f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e3, 0x3, 0x1, 0xb, 0x0, 0x30, [{{0x9, 0x4, 0xb2, 0x66, 0xe, 0xc2, 0x7f, 0x67, 0x3, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "511368cb"}, {0x5, 0x24, 0x0, 0x922}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x2, 0xe}, [@mbim_extended={0x8, 0x24, 0x1c, 0xff, 0xff, 0x6}]}, @hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x902}}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x3, 0x14, 0x1, [@generic={0xd9, 0x30, "8eb7f67b3a9ba5c7e04d921eadc4f6ebdeaaf91e9845d50d7f9f0c2dc301e160498f5332183db7f9952632b18615b249cd0a54ab154c8400aa7d36b91ef5b6280462e213175806de756a38e7bd9951186f2a9fbfaf195533a2356c1d4eac74813417daffec0f3e746941e4be6763a6c837777942d081c5d96c12eab2b0fecc25bb56e25a646401b6b7f0ae52a713cf83660ab77acbc9abd0c80473cd7e227f5ca48e81feb470a3da236e590e6856e3e9a7c899f8cd9bed56f2003b8c2bca8a9c14f5f6de573dab2758279dfe7bf851ac1a4b055f76d36f"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x6, 0x5, 0x9, [@generic={0x8b, 0x9, "63d33caac922711116410a1e2679ec36310d22cc883e9f4f826c1fdc5cacccee1be725a520479e0c673ef21d67bed4253bf78a98d5cfd301b60c4f4e9f22e1c0da0e6c69dab833fc58670bb8485a864cbf772c89c07fc2ef3e716a50640fb841faba924ecb6ea48b9326bb5c5270727e2488d60ec74ee2f72366d269e33e8bd174c13d5b39aa9d6670"}, @generic={0xf0, 0xf, "44be5cb7b9a514ef86b1861dd162efbf20d028a7a6646883e799db3c552aa333d842867c36ae86d7a1e301c7ebd0c92363888e2606d107f70c7e9ea45c27f2f281df93c8ef233ed6417207d8fcaebb32c465e90a6db8a9ca40ae9cdda85a3bf9598538c426cb2230529aaa0a567a7860d3fb04d2a3e802323748c9c9461ed6bbeea5a15ca0631c76879b1a22e662e5589c316267caf7e12f70227738abfeab5ebf25a2bf84808ceaa70b428c0620559263a22b39efec5c8556382231131a9f6612c6239a95726d829275c3fd43f2f7892bf908874f36b96b790d1018445d4b5fa87e8939a9189da92b6b906ad20f"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfd, 0x4, 0xff, [@generic={0x9, 0x9, "bb1c882706dfb7"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x0, 0x2}}, {{0x9, 0x5, 0x5, 0x975be788a2b529de, 0x200, 0x6, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xdd, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x6}]}}, {{0x9, 0x5, 0x9, 0x14, 0x400, 0xd, 0x92, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xe56}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ef, 0x4, 0xd, 0x23}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x6, 0x10, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x80, 0xf2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6c}]}}, {{0x9, 0x5, 0x6, 0x3, 0x218, 0x2, 0x0, 0x3, [@generic={0x9f, 0x3, "53ec8b2cc520bfb38544a570ada421bb471b69eb586c18441930a9281d114aa7d3829fcfd2c0370e5f4b3d07ce2947028e15ba90913758280d245064a027e7ded5da6f948aaf1960b94f739f98ea7b9bbc57c6e4a0519312ff471b4686a1cee03b2d9b60344f77d2694a2a0017d307a26f88236933e0d4f2042fa8824b8f9673fa256eff0897a94f005ee221d2ae93e1910dc5be859d4db58b088ee5d6"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xd, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5f, 0xc8}]}}, {{0x9, 0x5, 0x8b, 0x10, 0x10, 0x4, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8f, 0xd9b2}, @generic={0xfd, 0x4, "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"}]}}]}}, {{0x9, 0x4, 0x93, 0x0, 0x6, 0x1a, 0x0, 0x9a, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xbc, 0x9400, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0x0, 0x40, 0x9}, @dmm={0x7, 0x24, 0x14, 0x3ff, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x66}, @mdlm_detail={0xc5, 0x24, 0x13, 0x4, "2e52bbe7561f87024679aa923d0dd4ef57a654800246304fd6f7ccb5b0e9f30238ecad5e99e6b2f6ec37ac84a09757b8d179fe8882f6f2f3d6ec1325a94fad11424b1b4497cefbe508a58749c8e942600177b012ae40905f86d5785dd860938f5ba6710102032261b206d1e894e7b965b034741d2b893b3c7cc63137693160a2022d0ff80d94019349e9694d3fd39f6276ea7c0677fa7febabcd4b83d9df6f55a20328c9e9fe7a8c04161e5db8bd806657fd2e02d2f205951d67ac4c47a955ff44"}]}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x74, 0x4, 0x3, 0x3, "a3737c"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xff, 0x8000, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x7, 0x6, "f9222b5a94c8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x10, "df", "57d9"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x2, 0x5, "f1ef3273c69affc8"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x0, 'TN*~q'}]}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x5ef, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0x6, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x67}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0xfff9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x63}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x8, 0x4, 0x96}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x40, 0x9, 0x5}}]}}, {{0x9, 0x4, 0xfb, 0x24, 0xb, 0x1, 0x3d, 0xdb, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '#\ve'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7f8, 0xfe97, 0xf, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x1b}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x48}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @obex={0x5, 0x24, 0x15, 0xcaca}]}], [{{0x9, 0x5, 0xc, 0x10, 0x30, 0x1, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xf1, 0x6, 0xa}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x1, 0x9}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x7, 0x7, 0x6}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x6, 0x8, 0x9, [@generic={0x79, 0x21, "a26329e7692bcee4461017bb7111c91b1bd3d6ce30b27fa4f32a974841c7626ae416a60d93575aed2d3438efad6f5678856865eb17f3879aad3cd6f196bc97c05d400f12f7cc216640d8a63738f9bf8727c290a3fa86fe788492af2f4a01b908792d99be3e95d5e02c40975aa62afc8782ee625581202c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0xc, 0x440, 0xfa, 0x5, 0x6}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x0, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x5}, @generic={0xca, 0xb, "ed7cb0715356b61cbbdc00d513bb91f91bf94b25aa916a83c266aa2a26aa96c56e8f25cce5709cf922efedb2073459cdce7e014cb73d032d773406ffcf6766538adb0c05609e5b7be64c97a21597192e39a52693436891bca4a2cbef91a856804409c01952127cb61ce73f6611a8f70ef382fc0f3bc17cb49eb954a2b7bb7afffffb82ff04b68b4871bd47df9a2308d9fc07fe28e26285722858d165ffb7fe08d4d560b58a15120d5a254f7537162e27e9c08a1f9f6af218a4b18a088cd19e4cbc339571b0e58977"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x4, 0x85, 0x9, [@generic={0x1a, 0x23, "60d46da9f0b479c5a4667225061089cdd55ce5a1e2c1359e"}, @generic={0x43, 0xc, "1ca48ea15a6ee80ad484ccbc087e3f30bf46f72fefe1351befa7512f6c81e6f46d00dc02046be595a366ae54746a11826c6e81bebab3b0841075952fc00ee60683"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2, 0x6, 0x2, [@generic={0x9f, 0x22, "ad358ffd992293718df909812d7ccddc23347cb42fec14fce081b60c9bd1210c9353dcec31eac4371e2d9e58208b6ec413fa86c28f9e5c63be1468255cf70e1acca1811bcbedb844931f0efd5fd8bfcae347899724fca248eeb2431006ff370afbc96a51dc2620d2acfe4c6d0baf8676310dba869097882132e9ccf4020cf2f636d30bd14310474fb19f8d950fc864eb06fdcac9c8ae8ab8a7089dbd3d"}, @generic={0x62, 0x4, "8dcd32208e141a8e5052500df9cd4c8f05314794b81b4b0874c5b050e4b347f59e17e4df54bdef010b33b38f28d3a17c4b586303cc85da802ca47a343d55b09a748a7026983f85da6ad7f3c1c5b38cadf53171289999ad826660c27e031551fe"}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x40, 0x6, 0x0, 0x20, 0x9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x23, &(0x7f0000000100)=@string={0x23, 0x3, "3eef544b43ff2eaea6107bdd3c18dbe5f49397810aa083fa30b7f56ecb41c7f383"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x42c}}, {0x21, &(0x7f0000000cc0)=@string={0x21, 0x3, "c0e0f297e983f30ae1c756eb5e21e4506b6c9e26d7a3c437b12576259d34bc"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab4080905070210007fdc14090401"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0)
r1 = syz_usb_connect(0x2, 0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003c3d10a08dc17020250f10102030109024e000104e9000909042000000e0100ff0a240102000502010209240703deec9e701b789b22e603009d0924030106030501f90c24080201000dacf34b44910524040606092403090003"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000000)={0x40, 0x5efe8916ecb81041, 0x3d, {0x3d, 0x22, "674b23777a98f4b145a0f0c2eb173a76b2db6794396a067385b6bb91f68861085a1cad8151cb79b96d5211571746b1d7e56194306b1542ddb0d12a"}}, &(0x7f0000000100)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "05ebf5cc9d86b4a497f4b09be2e0ec6f1d22aa4e369bd558a68b8f9aeb08d99e4e3fbc2e1d298991977e81a81817cdbff301bd3b2ea6d2e43e1d1dd1951c17d0f182b4eacede9a5b0ddb47b244d8ba6205148f705abc9c59e16641f22cdf1b05bc13854611bb0470778279263c5e53239947e0e2337b2a12f73572063ef1b6fa10e6777341bd5021cc4e6a99dd1bbf1fb6962255bcecefd792eee889d7b2110c"}}, &(0x7f00000001c0)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x3, "828bab5d"}, @global=@item_012={0x2, 0x1, 0x0, "6be6"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_4={0x3, 0x0, 0xa, "ff027eea"}, @main=@item_4={0x3, 0x0, 0xa, "afe61d8f"}, @local=@item_012={0x2, 0x2, 0x8, '3<'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdfb, 0x5, 0x1, {0x22, 0x3ae}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x9, 0x94, "9df7119e9a3b368cdb6cc0cbe0c622f24eeff0f00e6421c5aa49a6fdfde6c6fd351eb423ff64b805708f79f9883494a662b47404b6afe78fc890d000f56e55252f1aa4f1071a5da136a36582ef2238ec897d48429f30f1875812ea47ce7281dc99e61bb121c1801d92c101ad5510ebab349ca8d4208366281901af49c4575eca39fffe10d8568f50b1279705966b50af00754af9"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000400)={0x20, 0x1, 0x6f, "f4c6fe91b3a6dfc2e50c61b6e6b6c3547427e1c31bfdd5976fabafb02d69363ecbd0524730f9dd7b357d483fb0a45c5e082bda3a3a43853055521fd2f80ca93426d889b4fe11c487009331c068cf9d1e57344fbcf53573cae969a523f018c34561ff983e6ad7bc0276bc8d28a62722"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x7}})
executing program 0:
syz_usb_disconnect(0xffffffffffffffff) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 32)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x8002, 0xa, 0x1}) (async)
r2 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r2) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES32=r2], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async, rerun: 32)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0x20, 0x3, "b99f42"}, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0)
syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc8, 0x7f, 0xfb, 0x40, 0x2013, 0x25f, 0x427, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x1, 0x65, 0xf3, 0x41, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "7f6b3e7b23798e"}]}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r4, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="200719000040c40600ccd784927803239da187e10723a0c7000000c38f65b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0)
r1 = syz_usb_connect(0x4, 0x1cb, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYBLOB="041f56e6ac11c2921f7672b5503c3f993d244d559db11ab3c299edcb28e01a9124d2ce91db19616fc46b7e0fb1c49aa8a12e0082ae5699220000000000000000ad6f882a7e7f3befd667f64e69b13fefc0632718564bc69fededcffdedc02fe701034bbd8f3a7a2f3709c968d0b04c75baa86ffe5948f47cc17f133ade967b3a", @ANYRESOCT=r0, @ANYBLOB="9e59f1adb1b1a94cfc1d7aa47d627e931ec43f297894ce3facd9babeed6ca804eb5013507361373eadbf1275e4b6f6dbfea97f7c5831fe659121f35dec", @ANYRES8], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x101000)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000000c0)=""/185)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009cbd6effd219210016bb010203010902090000fd050075e3ee6fb392245eeff819d2e5838d72dbfaa67bb726a37b778d757c4292fde59be0e2b77167c544d4250afce43677117ba8c86a27d19b905b51427122c414acf1277ccc8bffe39b83d61e3500b575d728096349e105ccdb17cd99267aac3fde4d735e9e0b83e84b33e0d3d56caea66fb5c02ef66efd68d94d3e2e13437e599306594cb4452c6d845ff7f42f900a86f4a760112f77bd9bbcad90411c42169209d367e8cfde79f3738b"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="203004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="c97c9f22debee1deb99ec42d1efd313cc00cfde26f96a1f3a46bbfc0d86cc6e7fe640ab343530be0abbbabd3bb6819722ff03f2c3a79e058806ee57d62a6594ac1821a24c6f674495ee5b0d787ced0cad3e924f7567b5f877d6c285d393764eefddff94dafec1d36"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000001c0)=""/246)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x20, 0x5, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x31, 0x4, "3f2d7f76"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0x9, 0x4, "f54d001d"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000400)={0x40, 0x14, 0x4, "c684be19"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x20, 0x5, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x31, 0x4, "3f2d7f76"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0x9, 0x4, "f54d001d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000400)={0x40, 0x14, 0x4, "c684be19"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
executing program 1:
syz_usb_connect(0x2, 0x4b, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xd4, 0x14, 0xfb, 0x40, 0x582, 0x4, 0x6b64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x3, 0x5, 0x6, 0x1d0, 0xa, [{{0x9, 0x4, 0x9f, 0x5, 0x0, 0xc2, 0x4c, 0x82, 0x2}}, {{0x9, 0x4, 0xa8, 0x8, 0x0, 0x71, 0xef, 0xc, 0x4}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0xeb, 0x4e, 0x1, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1cab, 0x1, 0xf4, "14a1e6"}]}, @uac_control={{0xa, 0x24, 0x1, 0x809, 0x5}}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022220000009623130f00000800070c00000076b8000a1a7083"], 0x0}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd992d40431950220100010203010902120001000000000904"], 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xb, 0x58, 0x7f, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xe7, 0x6, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x3, 0x4, 0x16, 0x20, 0xd}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x21, &(0x7f00000000c0)=@string={0x21, 0x3, "dac3c2b86b0b63a63a6c51b340009013ad2ced59d52cbdd92739f690cb0025"}}, {0xa2, &(0x7f0000000100)=@string={0xa2, 0x3, "c233cad1d998b05e52429e81f0aed07c6473db721020d97772b5a6edccbe75ca2e67bfcfa248da57ced05e0fc985ec9fe9d6b889a6f04266f303f4d5171e776ee52a6261bc7f80b41700632b135e755b3df4baba44140dbe531ea314d4a367b63a00bc60e13fea7e69c95c8b921b7644d133975551dd2bfbec704a310aebcb4fa3f96d40f767bc4397c1aa4bf97d2dc9999864dad2ccbc3f88b2205639ae8bab"}}, {0x9e, &(0x7f00000001c0)=@string={0x9e, 0x3, "e528178d7ba2efaf3332cdd4e8eae96d942f6b76b82add0549b2001bc7eb25cbf91540ea03831dadffeac0a6838873b9f17a24973703b7ee8123dcd0429b2139076a6bc4981bf8428b0c6a5613b3cfcecca8d0032070450b2991d9a4567a741544571e3a27cb9e9ed0c38a73c6d6c0053e0c06716b99b8366102763c081f523d829569cc7d63a2af46fbf690c985de34f6f24380b9de76c063e51d2f"}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "d21b171622a770e67e307abad6982fc2cf0760f588876678504949efc95dc453773a1f777473a56a213a8ff66505134878f8aa8a43e098d82633a590584801f5b518591bb57f4f852697c7258d765747aedb7816a78d88f9a69fe7e90ca35f953ffa7a247faa8c48a01dc37b16f0a6c4983f916aaa688ef6707e76753b73036c6cba18762e4e1f41634437acb804759bbb72b7aaf1fdae359fd332c5ad8d7cc1c1db8ad35a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x455}}, {0x15, &(0x7f0000000380)=@string={0x15, 0x3, "390a0ad823f7ff9977c77c83287117ccf169d6"}}]})
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x12, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x10, 0x7, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xbf, 0x9}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0xf8, 0xf, 0x9, 0x10, 0x8}, 0x16, &(0x7f00000004c0)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x22, 0x0, 0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41b}}, {0x6f, &(0x7f0000000540)=@string={0x6f, 0x3, "42b10dca8c502f68582b62a7383aeb91073da4ecb06b31de523461f6ea7bdbfe396c96a0805a3801498daa29932b4e100096f80db2ec0a39c786adc7d22a31674bb0676d950546376822009fefa56cce6fc92de03cc1948c74a09b00e5b440f8bbfc85ea567e2bc6e9b550531e"}}, {0x43, &(0x7f00000005c0)=@string={0x43, 0x3, "6645921e9acbd0b927ec75c972dc5679b5c43e8bf356ad52b355d9b534876111c3624631dea7d5c5e7dbcb9412e483073a0490ee3de6918ee3b7adda38ac31bddc"}}]})
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcb, 0x27, 0x28, 0x10, 0x2717, 0x4106, 0x2892, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0x68, 0x8}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x11, 0x0, 0x0})
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000040)=""/70)
syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x2, 0x3d, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x2, 0xc8}}, [{{0x9, 0x5, 0x82, 0x2, 0x42c, 0x9, 0x6, 0xa}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0xb9, 0x7, 0x40, 0x8}, 0xc0, &(0x7f00000001c0)={0x5, 0xf, 0xc0, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x8, 0x3b0, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffffff, 0x0, 0x1ff, [0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "89aa8ecdcf3f0949c0b714f13013fd67"}, @generic={0x7f, 0x10, 0x1, "219d559ce127a7c40fbc506a00dc89c17bcea656fc481d9e67167b9d83c12be08d72963f161ceee8bc9a960210736821df8586c3c3a6a92364203e20d17492e775acc4a905aad18004b1d7f35260c294e82213df1c74fbb51efd54bb48702ead0aed6b66c3d211cd38e871013a474794ffc0e3faf84b4d19cdeabf41"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xd6, 0x5, 0x7}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x211}}, {0x10, &(0x7f0000000340)=@string={0x10, 0x3, "b1ce0c45b02d5982bb75b83d5f0b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44c}}]})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x4, 0xea, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x3, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x3, 0x8], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x5, 0x4, 0x1ff, 0x6e, 0xf}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x2, 0xd, "74cbbccad8d2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x46, 0x40, "3752590304c5d2b212"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x29, 0x2, 0xff, {0x7, 0x25, 0x1, 0x81, 0x1a, 0xa08}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x2, 0x9, "e8c97d0b042f42"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x9, 0xb, "5c1e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x30, 0xa6, "", "b52f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf9, 0x4, 0x2c, 0x10, "", '$'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x2, 0x9, 0x9, 'K'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x20, "8d18f46e86"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9b, 0x6, 0x1, {0x7, 0x25, 0x1, 0x81, 0xd, 0x101}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x340, 0x10, 0x80, 0x1, 0x8, 0xf3}, 0xa9, &(0x7f0000000700)={0x5, 0xf, 0xa9, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x4, 0x70}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x9, 0x0, 0x0, [0x0, 0xffffc0, 0xf]}, @generic={0x54, 0x10, 0x3, "453991fd8ae2bd59c4c85d4b1a2d8c3ccf4913aa747baa1b7d6e41e33c185601125498182a742101c6b73822f1768376c0909eb7757ad863733761d7e36b88f938174822c86d4c2198382858b824621102"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x27, 0xc, 0x8, 0x7, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x64, 0x5, 0x3, 0xf000, 0x3, [0xf, 0x30, 0xff3f0f, 0xc000, 0x6000]}]}, 0x7, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x81d}}, {0x100, &(0x7f0000000800)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc45}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xdcfb}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x41d}}, {0xa3, &(0x7f0000000b00)=@string={0xa3, 0x3, "ad9a11917d449271c383a99f4b60e7f34aad4500aad62685c2886eb6c5acf87200721334143ebaa039d9985e42917374537163d359b47559ba4a31f249d09a5918f41f98c4bd66d9be86d9535243ba960b2e171ab1caa1db1903bca8ff3b4f6764af6d5f2b9be81efced950372e5211d167250d090f64aa3ca55b83e591b2ca6d57c6f4c90c7857be642400c8bd9a356c7b8f8a620fa599e59700794803d4cd4f8"}}, {0x100, &(0x7f0000000bc0)=@string={0x100, 0x3, "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"}}]})
r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xe0, 0x3, [{{0x9, 0x4, 0x0, 0x4e, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xd, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9a, 0xc, 0x7f}}]}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x310, 0x4, 0x6, 0x7f, 0x8, 0x5}, 0xe6, &(0x7f0000000d80)={0x5, 0xf, 0xe6, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1, 0xf8, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x0, 0x12}, @ptm_cap={0x3}, @generic={0xc1, 0x10, 0xa, "614f12183c4282ff4099a6b70bd1e2a392e92785ade59c75f643e3526c3000c3d6eadeb486f44740fe92b876a747bd587abfc66148dcfaeb9bce22eeb072c42fbd138635fca0c6309afd70463e19eec5f893483208257a9dbbe66cab75320f53bc48d72aab47c788ed70fc8f3bc093da6f32abfa0b60180f29e54f0d0fad48140e9485b1ce45b25bc3ec69b1de7836ce9a1077c860f5b9fda577bc051a2e6e8ddba9567b7057a9c0da4c761d1791255b2e3910d746cb5ea76de88b8863ea"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x20, 0x6a, 0xb, 0x1d}]}, 0x7, [{0xaf, &(0x7f0000000e80)=@string={0xaf, 0x3, "3c96853d3dd83d868b9901443dca445d85381d70ee987ccd7da1076f7f9b79ece8fdf1fe20b864ba8b59a3530d11de563ff721c8496441533153680395872b2d8fdfeed37b16565bdfb3648de495b3695647dd8717fd71864c9dfe9bdeeeddd8ad120c6b44fa55bbfbfd7674414a54a73bee905e40d0bee9c1972d932eb459d1a0f2700f50e9fd45dcca588ccb2842cf1347b4554996884a183c2ddaca5611b5a94a3009b8ef755703849a9e5b"}}, {0xe8, &(0x7f0000000f40)=@string={0xe8, 0x3, "8462a54ad270a5c6841c05b1dca776596f1854204e8ee10fadbd60b72d2e59806c0273827872b2f18f210773ab09b4cf50fbcbe5a54fe85033e74f13de89a52418fe090f021caffe80ce20da2dc18ce6e34aff4a48756322e4080438867a440c5292a7b3479772bffda7abec32a82e8acc5664803d37127af1b859f692ca964476917f10f53253fe5f027fefc6d3855b855647aeae7e628b3f746f2c779bba573caf0d92449de6cb81da2cf7b5ab730412d05b4dfd0ddfff4f6d80a40f5ad7b9dfefbba43e5ba4cd1339b9f7408aed4ef3f96141e362a71047451330a3aa9cb4f25ea00f14c0"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x40a}}, {0x5f, &(0x7f0000001080)=@string={0x5f, 0x3, "8789effc13a21047117a8509d5b5f2e0d797faa2cde7ac89dd39813b648b24e58458c27c9410ca03edf88c427f4f988ee305e44a63730bd6b839580527401b9f5610a7c2065ce8a55dec9a822083d4ef03dc5fa914f9b4e36e02022d01"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x1b, &(0x7f0000001140)=@string={0x1b, 0x3, "9c2c26c6e1c4dad7d23948ebfe796ed8231eba9d5560adf960"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x400a}}]})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x3aaeed48e614af2d, 0x4, {0x4, 0x0, "6bfb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f00000007c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x85, 0x3, "bf79c4"}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000001300)=ANY=[@ANYBLOB="12000000002fa35ff3fa729aff5ab734e7dfe8b326869f2b48cdbc086a29d750dc79ede6d0cb2880cdc618f73b1331ab2183bef4cacb8a8106bfed1c1dfc43d5aade0f7409f8e6fe706747cbd596cae56fbb43c6823794fa794adb9a5bd13a7ba2c5d9b6666fa09c881e34e286757e1d651107f985285de50f1564f8b28d9ff2e4023e9d23a3a88654aec285b8325fd314b7034c52fa8c9b1b8cbbf6d82038805314343461b8e7a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x80)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0xfffffffa)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x3, 0x1}, {0x80, 0x2}, @const={0x0, {0x0, 0x0, 0x2}}})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000004bc9d6a54b0200000000000109022400010000000009040000010300000009210000000122f804090581030000000000"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a1009050300000400000009050000ebff09030509050402d00800000009058102e0e470b9"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000001c40), 0x1, 0x4b842)
ioctl$HIDIOCGRDESC(r2, 0x4030582b, &(0x7f0000000000)={0xf, "6f5481000000e800000000000003d5"})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000580)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000000c0))
syz_usb_connect(0x2, 0x5a, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r0], 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x73, 0x2, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x6ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x4, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xfc, 0x81, 0x80, 0x40, 0x9}, 0x37, &(0x7f0000000100)={0x5, 0xf, 0x37, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x4, 0x40, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x1, 0xf00, 0x4, [0xff0000, 0xff00f0, 0x0, 0xffff1e, 0xff2080]}]}, 0xa, [{0x90, &(0x7f00000001c0)=@string={0x90, 0x3, "ac30d41c99a88a6601286be3877cf2f70605aa80d0e6fa4f43e03bd9d3b5e31d1062964c8861ddde5eecc0680e0ab02c5e633d5641f2d77b29cf9a193938c79acdd3cfd8905b5e7256a91bd2f2d38f21d1ef10d96c3c106e56f729e4d42c285ffd027fd4639ad8381d110cf3e21e36a0e5593e747edcc49287b0006e4d48e52c51341e8dd04d43f4e13619cac833"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}, {0x27, &(0x7f0000000380)=@string={0x27, 0x3, "7e149f26948bed7b8bc58527812dbfff493b0f4e75623dc228f2f3467c43e84e087e56b61e"}}, {0x40, &(0x7f00000003c0)=@string={0x40, 0x3, "8262e6e599bcde28f7a6608e8a760d25ebe78adb9c7b30aef0bec3f1e6b785d22646ca3f617e748572a43f65d5aa0a3bf836687d2e246ac9f8279a62df7d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c01}}]})
syz_usb_disconnect(0xffffffffffffffff)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r5, 0x81, 0x4, &(0x7f0000000140)="67465dd0")
ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000840)=""/175)
read$char_usb(r4, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_disconnect(r3)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x80, 0x0, 0x5c, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "da653ecb"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x100, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xf, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x4, 0xc}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x6, 0x3, 0x40, 0x4}, 0x178, &(0x7f0000000200)={0x5, 0xf, 0x178, 0x6, [@generic={0x87, 0x10, 0x3, "6cb20a8ffcae45f82161a830e3a819663a6df7617a7cb1d7520f287a1dd0ae17ab88ce4dbf6494b975fc0f2e875e82fdd147f53010bf284dbd0374239f6dad89661470687c2836de6e0c0643409cf1ae58bc684a955e68be5da7f7a330ea7e702e3ee0082e9cc82e26c31aae544741ce7b47537c2ea0f5ca429ace02d52b3dcfd5f490a5"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xab, "1a996a355d968c693b9c87fe4f1b7b9a"}, @generic={0xb7, 0x10, 0x1, "1dd52b56dc73beb10af418b8a86c38f3d6704633539789c4dcb9bf558ab2cd304664f93442be90b79a98641a4ff2c7d6954db95bc96476580f2f76029de4cc0e7ddfc34d8d75df26f82425212a7bf797171e680c8e92a991fc359982ca9ee41bb1c05bb46a37c90515a5dc651ee6316b75cd0abd026293f64bad22f931a89f3f43eabf6f25a8f41a38908aad17477586a1b993865086dce06e86e07627891eb65a0c9b4a4b3783cea9051c61d7f56deca4b2fccf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6e44e69ffc1074993de6d8fe9b9fc30d"}]}, 0x7, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x404}}, {0x72, &(0x7f0000000540)=@string={0x72, 0x3, "5bf70b2cab85d678dcbc0b427cb8c616e507b7ef8d266b4d7966c108429cd7e80508ad36ac29f435730d0c988c921d0dcdc694e6c7ebb9f18799c67165250aaf7bc2f56a2920d867f7d92f87b8fec31d7c14b0d36f5208d09bc713ddfff15df9502dc1574496c13a63113d067d4b8a7d"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "966431509781e05ed2296414d370fb42d3ffd37e4c4d3fe2d939fa5bef383883601defdc2664f6a346b3fd698a9bc3bfaf4e8d0bfdd60ae15e3aeadda479b9dbb49e20b1d83a8d9c9f9297087c6c746c262fb9870b5c1d9abb4224f045a1b9e4648123008076957c4508077b41d3302eb4d865de0dc413ccc265b5359f9cf6ba8adbc8b7e1b1ebbd9eb21398d207443d45f6eba0ca151702981a12e227029178fffc0df7a35f5f72139abc0744e5e81d22ed2c493519b8d2d10a1ccfa505bdaa4667da0d71a9ab5c99236924404185f581ab3d5201c29ce48802918b698c73120535664c773b38f986a2fc59234d5b"}}]})
syz_usb_control_io$uac1(r6, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x0, 0x3a, {0x3a, 0x9, "2db078e4667948edad4c1cf9ab385bf3f9a63f6f83029de74c2a74c36df6cf60f2abae850b7402a43d924157e0bf7081c1a2a575184a1194"}}, 0x0}, 0x0)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x9f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000006c0)={0x40, 0x3, 0xa1, {0xa1, 0x23, "986b3f7738305bac114b958edf4b38c8d33918b01e85a5619a058ae246d2e47341be4df0286a22ab5bfeded634fd2e9f35327c02b7e2fa2e7d5f711c787802c44ad64078b84421f0b54c7f94d8e5f5a55abd490161cad1298f048714b1a20b4d6d8033f69a862a6db3f379e47355732ec36c365a9675f7b8f74583d76b90e6d3fd58d96a39e55055c1a577f88d1adbe6453245893a5c38a99bb6e81634c80c"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000780)={0x0, 0xf, 0x120, {0x5, 0xf, 0x120, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x0, 0x0, 0x4, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x9, 0xc4}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x5, 0xfff9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x3, 0x1, 0x9}, @generic={0xf1, 0x10, 0xb, "48e7c27612f072643e8101eebfa55f2f75019a5e4ab198c7e3f79ed9082e4568f7021565feba67128b5a34c76a76ef8cef54b41f009bbe98a50a1b8bb9cefefbffa0bc3262c31aeb8d91c3d79fac92f1e69530da7f92dc16319162b082044560cb20ceb14d3e62f2c9838be23146fb738a08a74e45da06f9e9c6440e958b8123582f202ed12262e188b3f4ad80d0df62ad23c4b1aaba9ad36468ee82844fdf629d776a37c10159c2983b4b696d8f4e177efa540ac1649ba4d3c35177c24bf3b4d08d86dc6e457d4e5a4cefc3c66890b131b3fc92c545e21a653240de0c48e6259f3dda49528edb9bb2c8d46efb0b"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x8, 0x6, 0x0, "0e3ab7b9", "3645fd17"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x4, 0xe, 0x4, 0x8001}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000540)={0x0, 0x30, 0x2f, "b827ee38b1ba433e06a520169c15d0e073e17b8052ec840d38ecc2b675e08f1f86ca63568249be11600ec2219f7cbe"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xc9}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x0, 0x40, [0xe111]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x30}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "1916"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="643e84067d68"}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "6a93"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x81}})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nE'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_open_dev$evdev(0x0, 0xfffffffffffffffd, 0x86ee83)
syz_open_dev$hidraw(&(0x7f0000000440), 0x243c2917, 0x14a042)
syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x200)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000120001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="f6ffd1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x48, &(0x7f0000000640)={[{0x3e, 0x4e00, "532c416c78b5334bca52113f568e67ede506442dc34599e41177b3fb854247f09df4721607c2d7996367e169a597cd0a146a6a2b39c478c93e2d0760573d"}, {}]})
syz_open_dev$hidraw(0x0, 0x3, 0x800)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x99, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x1, 0x80, 0x80, 0xa5, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x2, 0x6, 0x0, 0x4e, {{0x8, 0x24, 0x6, 0x0, 0x0, "6227d2"}, {0x5, 0x24, 0x0, 0xd800}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x7, 0x6}, [@country_functional={0x10, 0x24, 0x7, 0x6, 0x2, [0x1ff, 0x8000, 0x6, 0x800, 0x8]}, @country_functional={0x6, 0x24, 0x7, 0x8, 0xb}, @country_functional={0x8, 0x24, 0x7, 0xf8, 0x2fd0, [0x1]}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x2, 0xd5, 0x81}, @mdlm={0x15, 0x24, 0x12, 0x80}, @ncm={0x6, 0x24, 0x1a, 0x493a, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x9, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x7, 0xdf}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x97, 0x80}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x9, 0x10, 0x65, 0x8, 0x9}, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="e009dbc5394ec9ad9c16f412d3050f08000aabf854450103100b"], 0x2, [{0xb4, &(0x7f0000000240)=@string={0xb4, 0x3, "7f8912a1b3e3279ad31512d6b42a6ff7176fbe79a5de7496434049612aca77e74efdb1e5f443e6f5f30b986aebb8180c733fbcacbb26a5bc9b1c6bf78bbec2895f8fe8de50e588878f9d3b8d6fa1837afdeecb6700a7c070ae690b65fad5990c246613b2f0c7c9e720424feeb674f821047e32d39f5bd1336bc7026a4d77f295fb39c11d9448668994898bcff8d33ee567b845c11a443566ecc09058975ee0829078eacaaf2c6d7e15c406c3beb258788067"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x816}}]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
executing program 4:
syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x100000, 0x400040, 0x4, 0x3})
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c86009722010201010400"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="4009860000000615bbdbf3454aa638d5071d41cb52198aba8dd5aba159ac70648759810b798bad44ca71bfbbd893f4fe96dc09e9050000000000000068ed949ca26d0e9b40600d265134bdf5b1db68eec4fbbcb387826163dee5ffe3ebdfe52fef70a15d2fe639bb6131afacb47e0a8350dad206ff634db686e12089b7e47a2e31c3f8f66d0b3b2e7159a005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x0, 0x16, 0x2, "72de"}, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x4c, 0x99, 0x14, 0x40, 0xbda, 0x8179, 0x594f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000480)={0x0, 0x0, 0x2, "4c87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f00000025c0)={{0x12, 0x1, 0x200, 0xc8, 0xa3, 0xa2, 0x8, 0x572, 0xd811, 0x42a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x10, 0x0, [{{0x9, 0x4, 0x6f, 0x4, 0x0, 0x7d, 0xdd, 0x64, 0x6}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0})
executing program 3:
syz_usb_connect(0x4, 0x5d5, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x5c, 0xe6, 0xd2, 0x40, 0x5a9, 0x8065, 0xd70b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c3, 0x1, 0xd9, 0x4, 0x0, 0xc, [{{0x9, 0x4, 0x9b, 0x24, 0xa, 0x68, 0x7d, 0x82, 0x2, [@hid_hid={0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x4b8}}], [{{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x4, 0x1, 0x2, [@generic={0x99, 0x30, "25cd369e4bdd4e14c106f2613e23e4376694aa6d1635b079d7f9d8788aca1275432f0cb21d75d1e4ee4c0d9c206abba16c8d017a1781865cd0197ceae5dcbc9057bce1ef4dd2402cbc3cc99083464fa0ba8f49efc075d85bb69b0812b254a6e9b95da279a4155ff967364e4dd8fb847e55588163b2a3b31b014c1726e70d7c9dfaf97d4e3ca24ac2825d0314aca2919a1ea3733f0261f7"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x6, 0xd, 0x4, [@generic={0xd8, 0x4, "2cef3f5550f425803c98eefeb3f61c8d76a69f63ec69b7ce90bd92c74d5d5496d2db2278c52974b26e93e822898d86d51820d9c21645864a132eadd5e248d04ea2bfdb3d5d88eeade8e7b2cb205899cfd27fbbf9310f9c1a6d3d62d6e83ef164faa31b9857d94d55d36a03258655a71a89693d8aa09e0cfb3b898f18a42c378b3a8f4bdc34047fbb3010e5e030f8604949083f4a413f1a5f772544e7319428880b9ef28cb3c6457943fa6d98fc767d50b469fcdddff3caaa70ffe40715828a7374b6df27664fcc4e4ef5a79b438ca052ca4bd815da25"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0xc, 0xaf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xbc, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7f}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x4, 0x0, 0xc, [@generic={0xae, 0x30, "6e3e28fe9e1dcf29d6daca93aca020cfa6cbc9305aa86b401b30c365dbd6e92c0ab8d5fe2afbec3d38b37749abe9582a304efa183f0f6401f7403719f3c0db0d2452a438a208f18ac39833b374da9eaba7aecba4a4db616ed27f1eca56c697e894e68e5f03460cc1b649291e9728d3f621d3a2058bbf1ef1cec47f0d3fa68a02d1decec1ce3fd7469169a0a881108bed8b3865833668493934d1642c9a488141171e19419662a3a5fbe62441"}, @uac_iso={0x7, 0x25, 0x1, 0x186, 0x60, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x3, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}, @generic={0xcb, 0x1, "b18383cc0f0efc1bbd55dae5032e1ae3b981694d90cc6ea53eb6f98baad00001d49e41bc344da913248cf27df8e919cac59fc9d9fce7e669eabeed1c1f37997b7b83c37d5e86e40c549251c348219ea07663259817a38d189dfb1eb349238d31680ffc237612ba2b7b53e09388f4f44bd4b55a2ff3405c7f6ccdc97a61d6a90dccdf0c4a1b38686c6a03f298591e14025d8ce4918a816260585cf5d9c9eae217b96a9cca538c116308bf78d5b3da016ae7ac5fdacce10efada3557eba2f72da1c4079c8ca241de6d54"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x3, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x401}, @generic={0x67, 0xe, "d45fec7bf13fec4939bbc7d59f36796fc7215e87f3fd7c13737fa59d2df5625fa2d83cefae049324ef5657dd0693e6d5ffc400d2b0ec9d473a0fe507078e16f2fa022c271ca4922329501566fdfe91df78e4037b4d4c52a3d0788c4399e85cecfc9ad6dd52"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x5}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x5, 0x4, 0x0, [@generic={0xe0, 0x6, "61acabafd0c8190d9d7c0b97d523d5928918daa762a3bdbe9c75b69cb9123b8ce66628fcfc8ffcec08896bef2e9943aca6929667ad7163c6a98b37de96902cee168b5be3dc47ada46a06afd50fd29576941ea7ff2273b202fdff793aca3fffaf4a9268ae2a15ec842cc59c1caec1cfa1b7913a4edb8707dc98838ce1a302bce8799279de03e971976978aabbe53535ed948995524ce90a2579a988eab3afabe8b3a11f450e6a41e202c0f95c9e85e59add1e1175b7423c24932decfd6f751f0e9c75fdd730605c08b0cba493f1ad086f8d4f3aaecf530f91de8bd77584e1"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0x3, 0x0, [@generic={0xec, 0x0, "0fac05b3a5a652a96bcf5b665e98c32fc503bc2aa2082b1b9d92946e73251964b53020aec281461165965517ba8ab9f946f7cd1767c888545885d6b6f26b83a899360e0033a4f96f6dea3879838da1c543ef06bbf79a55bd129e984662335199176e2218d6fc145498d6f4e7358df02dd5e34eb92d4c624973787a09f6b222a1a6cddb88dcc5ab1fe9c429a506eb0ee82f33162976031411054151bafd0a523870679b8d8f03f5115f57186a4d097466a4ef9832ed5ce71aada1bb52c9e158e3928361ad509db712e5389e84360529ed1d79b2328ccc55b537f343ddb090a566a29aa5b6c85f1fb6d7e1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x2, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x3}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0x4, 0xe, 0xff, 0x1}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x37, 0x2, 0x3f7}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4c11}}]})
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x1, 0x94, {0x94, 0x22, "d5ac7707c517526d93bab0076336517e2655f347e68f89efba6d9d5227b126855d16d3812a1b4ad585aabd40672eed19ede8a46cc043e66c687d1815d5dfd7f5bd18ea988768904706856f12336bb024675d861293c40eab3cd843346fdac99afb01bc8dfbc3168d9cb7e7b38c586e63c7e603e92dc6e30d72f27edeefbf437cb4fffe32632f2adf3beb028101d13bc46d17"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@\nE'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x36, {0x36, 0x6, "b32efdcce1da1de85e8402de31e3241b1469e29345d95eee353157199474e0f506a2f9220109e550694fce039e1f741344bf3df8"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0xf, 0xf7, "52f66e709977aeb65f8081a243b76641abdd25c54f152233583efa657d1e17fc998c6567fa8f7dfc7fe82c8c8d595470d1455df25413611baef06663e8fd9554c2cce9094cf1d01653b78ab16882ea0f6fe7d4fd5c69a20ed017ad50d97b27b6758b48291d53edb1adafb2f80a31dd3756f976a489a05e8feed93c8bad6461e1f34891a163ec8e61309d57c78c1d9b5645ac1353685434402f55a62d013c29344f1458ccf3d46b28e735057781edb7f121e8e064a9cad7bc72bc0245b5059436bb991910c68223a21007e3a9bb19ea299d2ea52a3852a47cf0e12f69ab71424f39ac0a3229e121e1a1343971a706d3462196759ffca60a"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "88e150"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "14"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "d92e"}, &(0x7f0000000380)={0x20, 0x84, 0x1, "cb"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, '^Q='}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
executing program 1:
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000880)=ANY=[], 0x0) (async, rerun: 64)
r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 64)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000740)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000012c0)={0x34, &(0x7f0000001100)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)={0x40, 0x13, 0x5, "9f192983cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000880)={0x40, 0x16, 0x8e, "00454d8dfcb2d3aeeda79e85cff95326b933f38be2090185bc75f27d88b5fb4d74986851dfefae69c6779d8c3089f215899718e0ae0ea19186a22d0399077b61c8ea338d8d849689556e26a78c409b41584b3f79dbd346ec03b76b8cdd3c1dee63cdabcc95e28b8955c5389f5635ab5073a810caaf91a025f961bc845aa19501be1e5c7599bd025d41a72948342e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0xc, 0x57, {0x57, 0x21, "a9477e3e9da117c74a7df0ca8b42acbf681e12df428480b1ed3633d22f90de1e87e7bcc50fd4b492e114fcd736a6c241071b3e12b20854b9d29be925cf37d7a7be37209c34b5a940edc21dcd98e6ff8cae1dba81e2"}}, &(0x7f0000000100)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "f86e67c7226eb8acc6e9348791b2fcb57987758539edcd3abfd7a466525cc6343e24f1993b423a17b4d98e283673f5d4b10825dd0646da4e7cd82560a4dfbdc7b8d45fcd0a3eb367350d08540415d9bdd76401a1c756f4b8f78459e582ce3f8b8ec7ec6e16648778f0a2a5621c894b97e9432c3a9ac9570e695dde"}}, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x0, "baf27946"}, @local=@item_012={0x2, 0x2, 0x5, "b305"}, @main=@item_012={0x1, 0x0, 0x8, "a1"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x2, 0x0, 0xb, "023c"}, @global=@item_012={0x2, 0x1, 0x5, "ceb4"}, @main=@item_4={0x3, 0x0, 0x8, "61a059d5"}, @main=@item_012={0x1, 0x0, 0xa, '0'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0xbc, 0x1, {0x22, 0x350}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0x17, 0xa7, "afa1473ff0aef9694c1d79ea7b9af456240670e070faffa9daf4966c4d10020e07f177e8043eadb0a522a575786ecf8f995488398a9f77f352ad6805fc1a138b4493c51c5c28cd58f6d01bcbd6a57df63af296b4c05c484076fb145bb49ba6a10865e7f5e063c9740d8b37f932c9c078b2b9e6c4ed1355077763087480d1b3f174aa7bae43483698e35f550b96c8cc305380427eabb2b9c3202058d7c66877bbd5fc34815ec286"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3d}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000600)={0x20, 0x1, 0xd5, "a76c55ba105ebf5c00773634fe381ad033487c66c3724f1f28a5b5a3950b3223c308c2f2a3de07e19e7e55f26348855235993dd64b26e8caca06336e0388f8cb1b682bd5bc6b7627a077158d61bfe703429d48b5f8a348192c9212ca335ab8d16b30592dff1aa5445b39431000d91d30c2b15b7b22c494f01ced4e1faa01efb8c160b82781c28961343dae09c1771fb289cd043ab2c3547906b092b443275a07148a9daefa9568ba84eb051c887eb6f823c2fe8f3c2c599dbddf6e6b669cb641484a0f9e991c1c3ee7f70bb5864e97418f18e202a9"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xf3}}) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x2, 'g'}, @main=@item_4={0x3, 0x0, 0x8, "a9e90dcb"}]}}, 0x0}, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x16, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x1, 0x402)
write$hidraw(r0, &(0x7f00000004c0)="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", 0x1000)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="6af200001a77aa4094225b4250a20102030109020500010000000009040000029237630009050602ff030000000905ba3e79e5b65c931b22cf1e62e6f59cc02bae3d0bbcdf9b01cf374722703c628c56fd69362afcfa3e8d42abb185cbb342096acd51423bb0ab46942478a31fe702d8d3b9451fad704f39bcff899c697a78c68ef600d1b77e8a"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400104004572b297dbb15308ce2abad88b69fb000003840f7b45cc8e06fe330822b6c518fde80469a8030f869e0af35ffef79618e4729d69faa69ed9f57f8c78c1c53339e78229a3cfe01a0c5e28178d2760db8ccf67d5d310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$hidraw(&(0x7f00000001c0), 0xffffffffffffffff, 0xcf042)
write$hidraw(r2, &(0x7f0000002bc0)="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", 0x1000)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x200)
write$hidraw(r2, &(0x7f0000000140)="d5", 0x1)
read$hidraw(r3, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00141a00000028e10a4e4f2c801840dbfba10424ebc56a5bd72d1a"], 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x22, 0xf, {[@main, @global=@item_012={0x1, 0x1, 0x9, "b7"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x5, "3a5193fb"}, @local=@item_4={0x3, 0x2, 0xa, "edf6c296"}]}}, 0x0}, 0x0) (async)
syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x7c, 0x89, 0x20, 0xccd, 0x5e, 0x1287, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xef, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x0, 0x0, 0xa3, 0x42, 0x80, 0x3}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000004023123f00000000000109022400030000a000090400000203000200092126e4000122450009058103937beaa7b6e364794e25543e0002000c03214f5239efd14fc6452c482cc5f452bfa60c39c0eaf9c48524e01e0ac6ddfe9cf18043cfb9f806ddef563b92a07ead587636"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x45, {0x45, 0x11, "61639c545d2ce9daa7602630c686377369efa824c3379300000000b0d2363bdd25b77c5b7708dfd51207b2908fceb485a8995d91250100ff9ebab19ba6613600e553d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r5, 0x5b02, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x62)
syz_usb_disconnect(r2)
executing program 3:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x6, 0xc9, &(0x7f0000000200)="1314784f13909c9635b63bc3ddfb7990f0621afa005d292d82e24678a9454c420b2dacd775c40eb19a442d803ec6d625869db652a679b221048ac65bb53ddf3fa8b1e1de221e47ef47776afb700213c758f7aa1c61e21ca2e35f0f4efbfa2bffb758c83f9252df475b1235d88043327e56b9dc03ad4ec0ab6bb9e451dacf26d09f2ca1ea602e9093a97c81e976b18817fca753ca5ae94921a340dcda3b644ee91a7aa316ec9501c7934d4e4fc6245e81f8e935ad996e5c207e11fecbed59a9c82b173e45fbc3957e04")
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c0000001c21f5b3da6207982802"], 0x0}, 0x0)
executing program 2:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20031380f5dc8fdf7f02794d0074d9b62bc3d23ddc78c2b24c1c8d70ebacf7080000009e38d1d01dca01d74b01689403ba1d3b222fc00467"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(0x0, 0x0, 0x822b01)
write$char_usb(r1, 0x0, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010085f15bae2a3a010203010902120001000000000904010000c0dafa009ec01f7dfac6c6bd475d961e3e470da5ed2dcee7f0932f103a827d2437134a1d48f6dfde98533bf6f2382b4f9f2346e927599ab4b119c778a8428b39d1084179"], 0x0) (async)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010085f15bae2a3a010203010902120001000000000904010000c0dafa009ec01f7dfac6c6bd475d961e3e470da5ed2dcee7f0932f103a827d2437134a1d48f6dfde98533bf6f2382b4f9f2346e927599ab4b119c778a8428b39d1084179"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x40, 0x0, 0xe, {0xe, 0x7, "9dcd66a9ed6d224f3b13c640"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x15, 0x73, "0f7615d3a74f20374fca49d5445d53cc08cb39e500a9ddd39d6d7c1acc270cde3fba81b4f6acb7f071760c50769e68cfabb94f6f5f866a8834b9ac71ffab4c3eed1dce0cfdd5f03530208ad2c3e4ff5a527054a7de21753f7942fc66230a8f296cca8da50d34dd8815ff89fbdd4f2d9530a9da"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x58, {0x56, "c5d2dc00cefa071ce139c22b847cc1fccf0063eac76010fab0e072c20ac1c70dcd5e4f4af196ce53ffd19d3603b023054f6595909507a725b609dc2dbdd830db7eea393123aed42d2b247771bea5fa591ab7fe58935f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x3}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x14, 0x1, "10"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x14, 0x1, "10"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x68d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000045673408d016a91014950102030109027b0604000420030904ea040dff"], 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x68d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000045673408d016a91014950102030109027b0604000420030904ea040dff"], 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010085f15bae2a3a010203010902120001000000000904010000c0dafa009ec01f7dfac6c6bd475d961e3e470da5ed2dcee7f0932f103a827d2437134a1d48f6dfde98533bf6f2382b4f9f2346e927599ab4b119c778a8428b39d1084179"], 0x0) (async)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010085f15bae2a3a010203010902120001000000000904010000c0dafa009ec01f7dfac6c6bd475d961e3e470da5ed2dcee7f0932f103a827d2437134a1d48f6dfde98533bf6f2382b4f9f2346e927599ab4b119c778a8428b39d1084179"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x40, 0x0, 0xe, {0xe, 0x7, "9dcd66a9ed6d224f3b13c640"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x15, 0x73, "0f7615d3a74f20374fca49d5445d53cc08cb39e500a9ddd39d6d7c1acc270cde3fba81b4f6acb7f071760c50769e68cfabb94f6f5f866a8834b9ac71ffab4c3eed1dce0cfdd5f03530208ad2c3e4ff5a527054a7de21753f7942fc66230a8f296cca8da50d34dd8815ff89fbdd4f2d9530a9da"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x58, {0x56, "c5d2dc00cefa071ce139c22b847cc1fccf0063eac76010fab0e072c20ac1c70dcd5e4f4af196ce53ffd19d3603b023054f6595909507a725b609dc2dbdd830db7eea393123aed42d2b247771bea5fa591ab7fe58935f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x3}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x14, 0x1, "10"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x14, 0x1, "10"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$evdev-write$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20031380f5dc8fdf7f02794d0074d9b62bc3d23ddc78c2b24c1c8d70ebacf7080000009e38d1d01dca01d74b01689403ba1d3b222fc00467"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(0x0, 0x0, 0x822b01)
write$char_usb(r1, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x6, 0xc9, &(0x7f0000000200)="1314784f13909c9635b63bc3ddfb7990f0621afa005d292d82e24678a9454c420b2dacd775c40eb19a442d803ec6d625869db652a679b221048ac65bb53ddf3fa8b1e1de221e47ef47776afb700213c758f7aa1c61e21ca2e35f0f4efbfa2bffb758c83f9252df475b1235d88043327e56b9dc03ad4ec0ab6bb9e451dacf26d09f2ca1ea602e9093a97c81e976b18817fca753ca5ae94921a340dcda3b644ee91a7aa316ec9501c7934d4e4fc6245e81f8e935ad996e5c207e11fecbed59a9c82b173e45fbc3957e04")
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c0000001c21f5b3da6207982802"], 0x0}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
single: successfully extracted reproducer
found reproducer with 10 syscalls
minimizing guilty program
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x6, 0xc9, &(0x7f0000000200)="1314784f13909c9635b63bc3ddfb7990f0621afa005d292d82e24678a9454c420b2dacd775c40eb19a442d803ec6d625869db652a679b221048ac65bb53ddf3fa8b1e1de221e47ef47776afb700213c758f7aa1c61e21ca2e35f0f4efbfa2bffb758c83f9252df475b1235d88043327e56b9dc03ad4ec0ab6bb9e451dacf26d09f2ca1ea602e9093a97c81e976b18817fca753ca5ae94921a340dcda3b644ee91a7aa316ec9501c7934d4e4fc6245e81f8e935ad996e5c207e11fecbed59a9c82b173e45fbc3957e04")
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x6, 0xc9, &(0x7f0000000200)="1314784f13909c9635b63bc3ddfb7990f0621afa005d292d82e24678a9454c420b2dacd775c40eb19a442d803ec6d625869db652a679b221048ac65bb53ddf3fa8b1e1de221e47ef47776afb700213c758f7aa1c61e21ca2e35f0f4efbfa2bffb758c83f9252df475b1235d88043327e56b9dc03ad4ec0ab6bb9e451dacf26d09f2ca1ea602e9093a97c81e976b18817fca753ca5ae94921a340dcda3b644ee91a7aa316ec9501c7934d4e4fc6245e81f8e935ad996e5c207e11fecbed59a9c82b173e45fbc3957e04")

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io$printer
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0xc0, 0x54, 0x10, 0x12cf, 0x7111, 0xf90a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x57, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)

program did not crash
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

program did not crash
testing program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m23.951891448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
simplifying C reproducer
testing compiled C program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
validation run: crashed=true
testing program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
validation run: crashed=true
testing program (duration=2m23.951891448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058209"], 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
validation run: crashed=true
reproducing took 56m25.42685819s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811a664738 by task v4l_id/6050

CPU: 1 UID: 0 PID: 6050 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x64/0xa0 drivers/media/v4l2-core/v4l2-fh.c:64
 em28xx_v4l2_open+0x24e/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x1d2/0x5e0 drivers/media/v4l2-core/v4l2-dev.c:433
 chrdev_open+0x234/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6da/0x13a0 fs/open.c:965
 vfs_open+0x82/0x3f0 fs/open.c:1097
 do_open fs/namei.c:3975 [inline]
 path_openat+0x1de4/0x2cb0 fs/namei.c:4134
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4d0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f15b2319407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffcd5ff1ed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f15b222b880 RCX: 00007f15b2319407
RDX: 0000000000000000 RSI: 00007ffcd5ff3f24 RDI: ffffffffffffff9c
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffcd5ff2120 R14: 00007f15b2aaf000 R15: 0000557a9e6144d8
 </TASK>

Allocated by task 5785:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:417
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 em28xx_v4l2_init+0x114/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 5785:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587
 kasan_save_free_info mm/kasan/kasan.h:406 [inline]
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2539 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x288/0x670 mm/slub.c:6837
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22b5/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811a664000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1848 bytes inside of
 freed 8192-byte region [ffff88811a664000, ffff88811a666000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a660
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea0004699801 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5785, tgid 5785 (kworker/0:6), ts 137578285992, free_ts 63624986516
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850
 prep_new_page mm/page_alloc.c:1858 [inline]
 get_page_from_freelist+0x1003/0x2dc0 mm/page_alloc.c:3884
 __alloc_frozen_pages_noprof+0x259/0x21f0 mm/page_alloc.c:5183
 alloc_pages_mpol+0xe4/0x410 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:3055 [inline]
 allocate_slab mm/slub.c:3228 [inline]
 new_slab+0x24a/0x360 mm/slub.c:3282
 ___slab_alloc+0xdb7/0x1a70 mm/slub.c:4651
 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4770
 __slab_alloc_node mm/slub.c:4846 [inline]
 slab_alloc_node mm/slub.c:5268 [inline]
 __kmalloc_cache_noprof+0x3c8/0x750 mm/slub.c:5758
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 em28xx_v4l2_init+0x114/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 3018 tgid 3018 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1394 [inline]
 __free_frozen_pages+0x78f/0x1000 mm/page_alloc.c:2906
 vfree+0x1fd/0xb50 mm/vmalloc.c:3440
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put kernel/kcov.c:435 [inline]
 kcov_close+0x34/0x60 kernel/kcov.c:535
 __fput+0x402/0xb70 fs/file_table.c:468
 task_work_run+0x150/0x240 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x86f/0x2bf0 kernel/exit.c:966
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1107
 get_signal+0x2671/0x26d0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x8f/0x7c0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x76/0xe0 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x40f/0x4d0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811a664600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811a664680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811a664700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                        ^
 ffff88811a664780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811a664800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811a664738 by task v4l_id/6050

CPU: 1 UID: 0 PID: 6050 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x64/0xa0 drivers/media/v4l2-core/v4l2-fh.c:64
 em28xx_v4l2_open+0x24e/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x1d2/0x5e0 drivers/media/v4l2-core/v4l2-dev.c:433
 chrdev_open+0x234/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6da/0x13a0 fs/open.c:965
 vfs_open+0x82/0x3f0 fs/open.c:1097
 do_open fs/namei.c:3975 [inline]
 path_openat+0x1de4/0x2cb0 fs/namei.c:4134
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4d0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f15b2319407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffcd5ff1ed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f15b222b880 RCX: 00007f15b2319407
RDX: 0000000000000000 RSI: 00007ffcd5ff3f24 RDI: ffffffffffffff9c
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffcd5ff2120 R14: 00007f15b2aaf000 R15: 0000557a9e6144d8
 </TASK>

Allocated by task 5785:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:417
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 em28xx_v4l2_init+0x114/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 5785:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587
 kasan_save_free_info mm/kasan/kasan.h:406 [inline]
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x43/0x70 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2539 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x288/0x670 mm/slub.c:6837
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22b5/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff88811a664000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1848 bytes inside of
 freed 8192-byte region [ffff88811a664000, ffff88811a666000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a660
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 dead000000000122 0000000000000000
head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
head: 0200000000000003 ffffea0004699801 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5785, tgid 5785 (kworker/0:6), ts 137578285992, free_ts 63624986516
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850
 prep_new_page mm/page_alloc.c:1858 [inline]
 get_page_from_freelist+0x1003/0x2dc0 mm/page_alloc.c:3884
 __alloc_frozen_pages_noprof+0x259/0x21f0 mm/page_alloc.c:5183
 alloc_pages_mpol+0xe4/0x410 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:3055 [inline]
 allocate_slab mm/slub.c:3228 [inline]
 new_slab+0x24a/0x360 mm/slub.c:3282
 ___slab_alloc+0xdb7/0x1a70 mm/slub.c:4651
 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4770
 __slab_alloc_node mm/slub.c:4846 [inline]
 slab_alloc_node mm/slub.c:5268 [inline]
 __kmalloc_cache_noprof+0x3c8/0x750 mm/slub.c:5758
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 em28xx_v4l2_init+0x114/0x4080 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x13a/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 3018 tgid 3018 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1394 [inline]
 __free_frozen_pages+0x78f/0x1000 mm/page_alloc.c:2906
 vfree+0x1fd/0xb50 mm/vmalloc.c:3440
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put kernel/kcov.c:435 [inline]
 kcov_close+0x34/0x60 kernel/kcov.c:535
 __fput+0x402/0xb70 fs/file_table.c:468
 task_work_run+0x150/0x240 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x86f/0x2bf0 kernel/exit.c:966
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1107
 get_signal+0x2671/0x26d0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x8f/0x7c0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x76/0xe0 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x40f/0x4d0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811a664600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811a664680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811a664700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                        ^
 ffff88811a664780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811a664800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================