Extracting prog: 15m2.941633966s
Minimizing prog: 55m33.312619151s
Simplifying prog options: 0s
Extracting C: 1m25.696099635s
Simplifying C: 8m39.550628626s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-write$char_usb-syz_usb_connect-syz_usb_connect-syz_usb_connect$printer
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x288, 0x91, 0x70, 0x19, 0x20, 0xb05, 0x18f1, 0xd7cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x5, 0x1, 0x30, 0x4f, [{{0x9, 0x4, 0x23, 0x9, 0x3, 0xff, 0xff, 0xff, 0x2, [], [{{0x9, 0x5, 0xa, 0x2, 0x8, 0x4, 0xb, 0x2}}, {{0x9, 0x5, 0x1, 0x2, 0x7df, 0x40, 0xf, 0x2}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0x7, 0x7}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0})
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xe0, 0x1, 0x4, 0x8, 0x3a8, 0x5732, 0x5e12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x4, 0x3, 0x4e, 0xfc, 0x55, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x4, 0x56, 0xca, 0xf6, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000082505a8a44200010203010902240001010090020904008102070102030905010210000088090905820240000e04fa2a73a6b202f7482e204ea121c3839fc1286e677d47bff7afb95986e3f4084432c6237e2820707724620cce8026ceeb40f8a0bf1e0f2ce2889d6de3674aa43be4401578e803235983a58b6992569ac957abc7576d0661d8b285b6a54125230415c7c86dda218ddd16613490cec4b8dcc9c30cd3d3b9c8f72a17538526f3c040ee7ef8c37c5d7fe44a669ec28e2e4d7daea9b51632df84ec2f86d0e86db85386ac77d085c7eba483957d31ac338098521c76201c75b64f2120f84948b7f738fd19ede5005326bfe9a69bce0e2e27b0"], &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x10, 0x24, 0x20}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x6, 0x2, 0x3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x81, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7d, 0x6, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf, 0x8b, 0x7ff}]}, 0x3, [{0x12, &(0x7f0000000100)=@string={0x12, 0x3, "c1abf3e87b041ebfdcf392aa92a9944f"}}, {0x68, &(0x7f0000000140)=@string={0x68, 0x3, "159c2533db74771220674cc332c10ddd410ee977b3706d8ccf9d37c02747b2c9324236c802793b4b2a2ee3150377c1b6fdbdee9cb2181b98995c592fdc2086f81dad416c70f13db678d98f2d8c9fce0cc0c2ac2ad393a6acb2b704b1d662cae9da011716c621"}}, {0x58, &(0x7f00000001c0)=@string={0x58, 0x3, "789eeb3d22b14a860a129976214d682351d8fda56390e065b7b0e95213fcf02aa075733ad02b4b01594f1a08eb3a3b723ff1e2720376409c9c5523841f3d0da8618eb0b6cecf0f8f811a714d31e5999f5c9d8fe86296"}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect-read$char_usb-read$char_usb-syz_usb_connect$hid-syz_usb_connect-syz_open_dev$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x89, 0xab, 0xa, 0x40, 0x45e, 0x445, 0xdf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x87, 0x3b, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r0, &(0x7f0000000100)=""/74, 0x4a)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1aad, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff05408dabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501ee"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2700)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0x3, 0x4, "3b8830fc"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0xbc, 0xc4, 0x10, 0x4e6, 0x5, 0x1ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x8d, 0x2, 0x2, 0x62, 0x92, 0x18, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x0, 0x6, 0x28, "2534e06dd7b5b5689c9d2683c1f79f7cb0504fe0aa4d5e46f95df6e33320d598bcf98032f80d2d40"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="00310101"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0xe, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x6, 0x187, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0xc0, 0xba, 0x47, 0x10, 0x77d, 0x410, 0x496, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x175, 0x1, 0x0, 0x3, 0x80, 0xf6, [{{0x9, 0x4, 0xe6, 0x0, 0x3, 0x9a, 0xc, 0x4a, 0x14, [@generic={0x1b, 0x8, "d7b056a97e21ede18036f583d0d76d0342ac3e697d53d7c3bc"}], [{{0x9, 0x5, 0x2, 0x4, 0x200, 0x8, 0x1, 0x2, [@generic={0xdc, 0xa, "7fe2be0ef34d6853f61956dcbd64b29ddde732c528504ccee5caee55c8b04c419609ae352a2b7419bcae75a5fe4fc09ac49fd9e5b4e808ec5e235af3ad3be215b15470b2a8a3b201a4e4d140913a986fbdb8b2a6bfb8a0a91f1de7a5472a7ee5779dd60699876629e7ab8e77d4150650b2a20a7fa6d83c352d676e0c02874b9ed545c76c54cb37834b26760c9b0a0909c7989891f9407aa30f383094cb027ed674d89f7e7b368181de584e317a4e0c30833cad11a01d865171b8868e26eaafe332adc7683ec741de35afb0e31abe03c735845b2e32ceea0d312a"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0xcf, 0x8, 0xc}}, {{0x9, 0x5, 0x0, 0x18, 0x3ff, 0x10, 0x4, 0x3, [@generic={0x51, 0x5, "4ee3b148ec689329597d83259f908f5d8dbd0d42f655d60bb6af9b3ce055ecd3e510f51203e37d0abe6cadfe96a56917ec031a5d5ef4e0dfc436e1cadabfed419ce2cbe7a27debfa2ae4c49c5c5388"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_ep_write(r2, 0x9, 0x67, &(0x7f0000000140)="041ec4ae1d2f731c27f3594fb22f5e57b42ced59d6dc0899a36a2ea56ff81a44df6a74080abd4b76ddb6d07cb2756bbe4bb85655af4bf6ac6bddf16bae357b5702c34bca4cfbc6b0f140fde058298ddd04eda889d6e3e727d7946c70f8db3915eaf75f800cf8d2")

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x84040)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3, 2, 30, 30, 2, 2, 9, 30, 19, 23, 28, 9, 1, 24, 21, 30, 17, 3, 15, 8, 19, 24, 8, 1, 30, 15, 5, 9, 5]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x0, 0x15, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x20, 0x11}, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc6, 0x88, 0x82, 0x40, 0xbda, 0x318b, 0xa027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="20033300000069df7a"], 0x0, 0x0})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x1, 0x15, &(0x7f0000000040)="b24b638c14054957df5cb3544506e6db5682778a94"})
executing program 3:
r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
read$hidraw(r0, 0x0, 0x2)
executing program 3:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, 'a@ro'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xf, "5e6424818327b2369deca65eb21f68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="4030050000002e5abd5c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001500)={0x34, &(0x7f0000001340)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0x4, "d59537c8"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000007c0)={0x40, 0x13, 0x4, "7e1267b1"}, 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0xd2401)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40442)
r2 = syz_open_dev$evdev(&(0x7f0000001140), 0x43c3, 0x415903)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/7)
executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b0001000000000904000001030102"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000401e020000000000000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0xfffffffffffffe6d, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x8, 0x0, "47f886f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xaf, 0x31, 0x69, 0x8, 0x2001, 0x3c1f, 0x5855, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x1, 0x3d, 0x23, 0xcb, 0x1, [], [{{0x9, 0x5, 0x1, 0x3, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async)
syz_usb_connect(0x6, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000014c0)={0x14, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000002980)={0x2c, 0x0, &(0x7f0000002840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_disconnect(r3) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022220000009623130f00000800070c00000076b8000a1a7083"], 0x0}, 0x0) (async)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) (async)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100001ed472082a110500a8140002180109021b00010000000009040000015a07660009059f8e"], 0x0) (async)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x141000) (async)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x0, 0x6e, {0x6e, 0x0, "6bfb5465e6c35698b047654524c3b165bf661a2a04ceefd572c552aa9eb7717de0701f81f1017c4f77b42f746aa088266a30480623f0134712dc4e12689b9c1f8a26e3fe790f27c98df81f3dbb9d2beae074071cba31fc46027755a65190f7006d4abc4af6055120493a0d0e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1, 0x100)
ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, &(0x7f00000001c0)={0x1, 0x2, 0xff})
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000300)={0x0, 0x7, 0xe1, {0xe1, 0x27, "b155b5d51ffb6854d2a4dd4812367a96f41736d41a877ecd2be5f06ee3baca7c354afcdb67169993f6704ba02cfd40648febdce93e831c01147bb6ffefe80cd761b4c18af6d56a7b30113c0f6129e484435536df49d3e039c800f13a847f9986917ef719e8649ed1a54e4b20987d4a427a19b7d365bbd9e0cbc8b77061d5ba869f1d921cd0fb59c0bf5178c078a342d9c4cf3f9ed276328689821bc98d10120f3012bb7d114696594a369d17ab0ae4c4b5c8b34d5fbaeafb0a7a0893de376da84cba0fbe675ec6af216775a5ad9ee33af8114abca639384f60088ee64af6ee"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0xa, "eaf2e434"}, @main=@item_4={0x3, 0x0, 0x9, "f23b4ecd"}, @main=@item_012={0x1, 0x0, 0x8, 'M'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x6a2}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x1, 0x39, "41cbb8660aec3589ae9ef616882241823366d96acb55d340f66dab3c70223bebdae561bd02d8fac1a1478df48742e18a2b78469ac0bc2881f2"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000700)={0x20, 0x1, 0xb7, "7a8ec009aaec60a7a3952ca0e9f0d7309357df7ce12451552ba7b007a9a71574adcd43181f4c81b6f1a111ba1d7f57e9ddf7ac40f2a3fd39cd26f97a34ec42b0817aa1a4318e929794893ef29aa0bcbf8d4d9070783a710f06c9ffd18a795596cd8f9deae79204c244f9a9e638d6eaef8f571d6d7a73b97e51a0e6940bcc6f771bd8c7dea59c7ba5759b5024c48f617386de6e66c1841cde591e0ee39ff53751c52890d4839d965d36198ce4d675ae4e501054e69fd695"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}})
executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ece2"], 0x0)
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95)
executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xc7, 0xe1, 0x8, 0x7392, 0xd611, 0xe7bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x9, 0x12}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x98, 0x67, 0xfd, 0x40, 0x1618, 0x9116, 0x998f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0x20, 0x38}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x40, 0x0, 0x1, "ea"}, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x6, 0x187, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0x56, 0xb0, 0xd3, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f00000017c0)={0x2c, &(0x7f0000001500)={0x20, 0x10, 0xb6, {0xb6, 0x34, "82142b6b42af12ed14cdd5cced20b010f6c81df2a69a9242ef48f3d1d11b1d3d2a7b07bd7f11b5ad44f669c3fb638163a4aec2c2240bc03808af83e38ee42be41e7fb839ec1970b496cb969dc51dac86e7090eb946456dd797829721fb7784f3ad3466446b0a1897bd4867547480a0b4c9d02804003033205d9d9a15fcf71216abbeb1efbf5e99a23cd8a56b6b82c4d6032625b7a208c173ce643ea127effe812e14b0e614b692e8f77b9078923cfaf4cd12d64c"}}, &(0x7f0000001680)={0x0, 0x3, 0x27, @string={0x27, 0x3, "6cbd71a3afd5a0014b750ba1f3ae6023f0e992fa7d21a67b3992a59296620fe685b196d9ee"}}, &(0x7f00000016c0)={0x0, 0xf, 0x70, {0x5, 0xf, 0x70, 0x2, [@generic={0x5c, 0x10, 0x2, "469b2f9245fa5ccc3ac47511a27f0a8c26abe60f93be1f7090868181ea8d24bb11b1bbc0e64116531cb5a1120d4647256060a801dbf3f049b88dcb2ddf34402e4c131cb62dd6c3690d0245560fb9f2088cb7ef50ffbc13d989"}, @generic={0xf, 0x10, 0x4, "361a8bc6f7e0c7cef102d603"}]}}, &(0x7f0000001740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x2, 0x40, "07a08910", "6438768e"}}, &(0x7f0000001780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x2, 0x8, 0x2, 0x7, 0x6}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001800)={0x0, 0x7, 0xe6, "e03150cc330443771fa1f78b5dcf3519cc2a4386931ca1468e8298c6deaca9554729ecb763f58f81b4c10976d1c673fd4924196b5f017a3f50cb3b2a84e125ba0f11304a9a9d18c60ee1b88b9c676702945a32c46ae366f7d99a13ba9737ad15637104175a17c5ebd0b9e32a9b5625650a3c51ec629a3b36b1680110e3d4d8cd4a10f8e6b8ec1f4c783962540f99787cf1132f087e79d0e103e893f7451af0da7581a792035d3dfcce4b8c16ca2ddff3d6b090ec2bf2a45889b2bbc82662dbf95d458515dd721662e6b900c07986f35d252445a273a53783a386dbe644cb0518588b6219e5bb"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x20, 0x10, [0x11f0]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "d7c0"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "9bda"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000001c80)={0x40, 0x1e, 0x1}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0x3}})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000b40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="400802000000f62c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x6, {0x6, 0x1, "a7ea3163"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0xa, &(0x7f0000000400)="b9425b44651dd2323696")
syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x20, 0xe, 0x4, "6929a739"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x160, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x3, 0xd5}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x10, 0x4, 0x1, 0x10, 0x2}, 0x1c, &(0x7f0000000140)=ANY=[], 0x9, [{0x67, &(0x7f0000000400)=@string={0x67, 0x3, "fdc32a3f0ddd68b91fc64b03553b1d74bb727965d15831b6097b8224aeb65260a235eb1d56447ac46c077c4e66cc6002fb3e653c5a34f58e85ee8046b1937c21324bd815dd9033f945f3d23a4ff29049a943e89a788f7098325da426a2a9edd79d77cc4df8"}}, {0x52, &(0x7f0000000240)=@string={0x52, 0x3, "ee2f48243ce7a0558787422756df521a32cc1d4b1065105798b9e910430af0137c9cf930098ab6a06d895fe7d02b29bee8bb7d3c80ba992d24246044da72b3e2f7bb4fd567283773c89e4a376f18ad0c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x7d, &(0x7f0000000500)=@string={0x7d, 0x3, "043dcfb65e2f1334073b79784535fae548cbd431e3d90e7f2b7ddc42c3d44d187c592b46522b5b637896f239b21d2bf8e2c143564190567e5ebad3074af73d7763d56e1f117fc478533e0b320d300635907b947911614e4925c4306a6f545e282993d624f2f8d7b9b5b486ce0e01d8da5720a145ca1825c637a17a"}}, {0xbd, &(0x7f0000000580)=@string={0xbd, 0x3, "effde1377a7dd49496607e66b49ca2d7adb952de095ca46ded7cd2845933d033342aa06d0181e1104d57709d079a66962fb97fd1dd97c23e41423f5f7e7cc1815d5919fe267f28efeb9b3b0fe2773c9bceb9ac6d861be923b4990a22788cc272a0290289651a9f1e8bbd0da381ebaa37e31c6126114028669999c7746c20c4b47b59eed5dd21c40037c06f3e385ed6d7534a30a1f1ad21a37db07f6113bdc46b7d7b2979578682fc56c9f4a890bb8546b7cc5019759a50984a19ec"}}, {0x6, &(0x7f0000000640)=@string={0x6, 0x3, "d735db75"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1809}}, {0xee, &(0x7f0000000880)=ANY=[@ANYBLOB="ee03808153e8eabb0bafce0209df79bc6c17d660ba3a7c358f9ecf04bef1548fd098399bdc76cedf41ce3fe2ec274e6c583847f3052ca67e31bbb582b9ac3ff9a323e552cbcc957d070900000000000000b97d6810f331790cfc4cdf6ecc5cbf1bb1524c53ccf40cf4950dddcaf628a91fd94f6ab93ebf376d9f9e302dba0ffa0231de2cb5b0c51917d0fdc82150e72e2e277cce3f92df0ff50eb333eec93c3f7731102a33a2043c4dacce6e25ae24d7b89cb3f2726e54baa3fb3b620a0e35781412049804556c257c4c1f7c2c0632ff27b5ae1341d38ea66164f784611a2ebbcc3f2721048a08fb0156cd909479"]}]})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 0:
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xcabb7aab17d1f79d)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008050bb61940000102030109022400010100000009040000010301000009210000000122690009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000016c0)={0x24, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0493c200e2000c0001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x80404531, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x31, "a12c3daac5ddf8b5185f7344bd488c3b4909010087d7540a0f93c6a22716962d7d202caaf5a7569200aef3b038841aa55b"}, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000002f80)={0x2c, &(0x7f0000002cc0)=ANY=[@ANYBLOB="000069000000690087a6d0129ff2df82c9c062db0f6faeb91f3593caf222be53d708a637800c248f94a3e7e4b08e9222ca1879d2ed7122192fa10004f5cd57650185e7"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x9, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6cf821af28"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x62, 0xe90, 0xa83a, 0xff}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x81, 0x62}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x10, 0x93}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x3, 0x5e}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0x4, 0x0, 0x40, 0x9}, 0x13, &(0x7f0000000200)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xd, 0x7, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x8, 0x2000}]}, 0x2, [{0xc1, &(0x7f0000000240)=@string={0xc1, 0x3, "3253ee5d4cfd1830ff0ae6ab0458154bcbc4ad334321bbc5830d93b63fd3e51e9265179530a1bd15b454e46ed6f90a528ef6830eaaadbec76825aa0ddcf4aaa7a3dab878e96cae9c58ebc8ab38e7bf6f44ea11a5263a4477f77707cc847e33a3a0cffa5e8bd036573fd331b451120d1f3451e6ac33660588ea7ef308b7e69c6d474d442c8a238d8f2a235454e3c07e7f44931b01308a2d1fb846667af1b1c802fa5372405513861b3e4ebfd70119501fd1df7227a57f3b40c272b50bc0e4e1"}}, {0x3f, &(0x7f0000000340)=@string={0x3f, 0x3, "e3500d950900000000000000dfa9c6c346c1055c08ebab2e6da36770beb5a3249cc4de4de50f51eea825da913c1a5353d700"/61}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x40, 0x21, 0x22, {0x22, 0x23, "d7920bdbac755c9312f9cc87ea349b63d2335c8b1ae9763f7c858de43461b324"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="0013220000007467bc31c98ad64756f75fa7082b5bf9eec337a3e57d64e62d1fe8deac205e8d8853b88eab16d1a3c1d46c2268f37b661c0c614016a9f167768a566e1cc67e812f1ab28593b96a9e537bfe2a1471ead213f61e7d40cde1c064e272fa6d68e7bc36db2907f5aa0b2fe19969"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x6, 0x2, 0x0, 0x10, 0x8, 0x5, 0x6, 0x9, 0xffb5, 0x3, 0x800, 0x5b46}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0xff00}, &(0x7f0000000880)={0x20, 0x89, 0x2}})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8001)
write$char_usb(r3, &(0x7f0000000380)="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", 0x21b)
read$char_usb(r3, &(0x7f00000000c0)=""/252, 0xfc)
executing program 1:
syz_usb_connect$uac1(0x0, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028600030100000009040000000101f7ff0a2401"], 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000000001, 0x48342)
syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGSND(r0, 0x40086602, &(0x7f0000000240)=""/4096)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000080)={0x3, 0xffffffff, 0x50e2ca37, 0x9, 0x3, 0x6})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f0000000140)=""/13, 0xd)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r5)
r6 = syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x29, 0xe, 0xa0, {0x7, 0x25, 0x1, 0x80, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x7, 0x2, {0x7, 0x25, 0x1, 0x81, 0xfa, 0x5}}}}}}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$char_usb(r4, &(0x7f0000000000)="59dc", 0x2)
r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc, 0x3, 0x1, {0x22, 0xa}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xb2, 0x9, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ff01090224050000000000000000fe020301030809218fdc000122dcfffffffffc6c440009fd"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xa, 0x3, 0x34, 0x10, 0x4}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "126e030939f1ac6dbed9e47131833e06"}]}, 0x2, [{0xef, &(0x7f0000000480)=ANY=[@ANYBLOB="ef03493e5a6d16e2445c17d78f983c3cbad1f25d904b533cbc70c265e9b0098aa8ea1bcd720b11fa8fbdc19258fa52d0e162d15094a24f18b2a594598a6924fba40768925f76cc1d004637147753077f55a521362342992da154b95af632476dfec9656a1147f10d0054cff5827da6a57d5bbc2525172405f61bc9707183df25ce9c194ed2dacfb0b171486c89613851bb342e789500000000de17af5e05002648c533ed579e3f2bec1131055a9608e9cb62a7bd94223d3ab21406e2645d5840a394838c53f20e000000000000002edcbe9de1a75be2fef2329c46cc95fcd72711981c035b361165650a673b5e2fe2da49832683"]}, {0xc2, &(0x7f0000000200)=@string={0xc2, 0x3, "e696597d3102bcd8a23186a788c71dbf2b5ca9a83d009dbfeda71b1d942606ff9fa3c050dc50b0ceafcda3164a0cc3e488e84eb6e1566a0b3cebecb0297153b07a6df20b402695b8a784157f035f293421791ec4037aeebc11ab28810be329a1c3f8b365f716d9748b0f0699299e2418895fae661303fac728f64603aa46f9ea6728c93615b78dd570ff4f8899ea6dcca52bb8574b1cfecb7a83a4275f16ddb23e7d8556f0e2d54987ffa89de00614e1b7d7c65564be14c0caad9dfe94ac4fca"}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a44808f00a71729188010203010902240001060000000904000002ffffff0009ffff0000000000000905ec"], 0x0)
r2 = syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
r3 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r1)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000ec0)={0x24, &(0x7f0000000c80)={0x0, 0x24, 0xa4, {0xa4, 0x8, "4dc84fa75406437973e1fcb976fe35b265099bf9310f54a054f3ab5e1d1fe8ec54a23b51e7be2cb3b8a0048cea319f84018c748875b2e2500b6510f42893961c726c322091772cba2f99184ad345a0f0a854af40acd900d684ee42bc2a4db8ab30af25f1625dc7dadddd921e5c51215f8c8fc9b27e99fd36d038c6b48aeee56ae4f189ac74707685683ebb022bfe8af431872f58586bfd90147a2e7c1fa92af397b3"}}, &(0x7f0000000d40)={0x0, 0x3, 0xca, @string={0xca, 0x3, "dd59e71b527f75d597f66bd73bd37fe7e74804f8adc26da48ca1912f55854787f0418a9f911d44fe08f4f22e6fdf1e1369a1f8e9cafe5b682e29050b2d398660b68b7a7349fbfb91a4a88faa015b59d25d42ee116b88306a08d02205983663476269b3f2d2510ddf3d7dadc8a60e25bb17247bdfd639b78ee314474d14ce49533c89c11249ad277398e5df824ff565825d768c6b8f23500f09737abe7c3a3e49c5e5cdcc24ad69d3b6924e3915ea8fa71721c60a20f18d775b12f0d82b284f652b0d4590711272b8"}}, &(0x7f0000000e40)=ANY=[@ANYBLOB="002202000000d288"], &(0x7f0000000e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x567}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)={0x20, 0x10, 0x30, "8af60e245f13826c6d793a1dc9492787c3be27ebb16bf66b0ca92030176654ea30dc70a4063d4a88fdd69f459443d01e"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000fc0)={0x20, 0x1, 0x8c, "cd20758993d10f9fb86e680c29638ee197d2ce4683dbb88f9ff9a44bbded91305b82c629ad2986d94abbe3b3d4a4ff2549161928c0bc4caf7966832c2a73ae364bd5cf341633cba85c371cfa17e35b5183360181766647b9fe4640d1962f3ca02633cd3c1a226533d394ec1e6628451a3f0396332d0ffbe7f3e155fd1a876e048d611c217fe2f58d1b2d091b"}, &(0x7f0000001080)={0x20, 0x3, 0x1, 0x4}})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x4, [@generic={0x3, 0x10, 0xa}, @wireless={0xb, 0x10, 0x1, 0x0, 0x11, 0x5d, 0x0, 0x4}, @generic={0x3, 0x10, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x7}]}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000580)={0x60, 0xb3fe660ca03c43da, 0xcd, {0xcd, 0xd, "6f387b6bbd22c036aa54699b12cef99dd1bcde2534bfe5f0a2ada39a6799b415a06cd66a9437864d214e155307d0f0e33cac4b1bfddc90c7a4f44da24051d0e8082fd4c2453a91cad127593db046c007ce025efd7f8330bef74573e9b4d6b192e919f1059eb3c2a8e670fe76e566525781dbd7ddc2b17a2fcae99e94dfaab8284fae4161c706e32b22d20423905851587c9a4a915a2ec407445e3b9a1f69adf5ff2569b07aeba4542ab08e621d55a286e62a37cb4887fd890a81646a4ffb3a5e680e442a78875298c665f1"}}, &(0x7f0000000680)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "ed565ee3545c2b05ba9f7160a3fdb1c83688f1ef3e810bd325cecb77d70226b15e2659617f9352c76573a04175d3532fea0ca4b25c8eeefe1d1edb1c9db8ecef36e4c48a71564c5e5ac2dec84a79e1fd9899e5d46b37692be98c14cc649eaf6ca375ddd5b91dd171bbedf3410c5e1b0ce20726cebf253ca7a45732ca289642b3be51b6d46be21b98dfb3df310406aa7e1b8ecd0b9b7e18dc0dc1b78a2123d1a00d97870374c7ce1aa26f085ce3ea7e3005838ae193baa6bd0c24be67038f612bc8e47ae6130cb6fba648d3ecdd4eebbedf5fc126892b14d875d27c0961e5f01f2870a1df3971bd0e6f3d389c74d143fad070fb09d8"}}, &(0x7f0000000100)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x7, 0xd, 0xb, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x800, 0x0, 0x7, [0xc000, 0xc000, 0xc03f, 0xc000, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xf, 0x1}, @generic={0x10, 0x10, 0x3, "f62c18c5ed484ff1fffda47b3b"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x7f, 0x6bb}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x60, 0x60, 0x80, 0x0, "22008584", "b9c13e5d"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x6, 0x10, 0xa1, 0x0, 0xa}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x40, 0x1, 0xb5, "ff9d30b0d5778aca5f005667d1b5d4aa07fdda804090ae61e14379d51744e8e96c1e9e4e0954b0f98be013a47ec331c2d4cb8a9765dd6aef793107b2c997e294c26614b940402076dbcde2c9fe30ea66977008a6ba32ba2148837be7a28b2a37c0a12e55486b480fd8a0c64479e15e8377e9bd8490c3b9d6e5ef4578439b97c19fd836d79be5df3dacf22a96b0c32eca438a7388cb10996ae1fa3c1520ce203934ad58469e7ec0bdd343dce8e9b8bb3a0d6ccfdd5c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0xb, 0x2, "6110"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xb318}, &(0x7f0000000a00)={0x40, 0x13, 0x6}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "c254"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xffd7}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000b40)={0x40, 0x1e, 0x1}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x89, 0xab, 0xa, 0x40, 0x45e, 0x445, 0xdf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x87, 0x3b, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r0, &(0x7f0000000100)=""/74, 0x4a)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1aad, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff05408dabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501ee"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x1800)
executing program 1:
read$hidraw(0xffffffffffffffff, 0x0, 0x2)
executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc6, 0x88, 0x82, 0x40, 0xbda, 0x318b, 0xa027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x8, 0x4100)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000008c0)={0x3, 0x200, 0x5, 0xb087, 0x5, 0x4})
r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0xfd, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120150028584d14045058080020001020301090212000108808008090402"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x2c, {0x2c, 0xb, "2d6ea0a320fddc7698dfb07f2c1c5b6093b8bb516c14e22ea7ac4dd3a590ad2bfae1061f36a2169397a6"}}, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0xf, 0x55, '^t^i', "5483e423"}}, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x82, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x325, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x30, 0x56, {0x9d, 0x3, "5766e94875af66b51f6300ec42d3640d3b81c6daeeb2310bf1d965e2bd062bac5f4e9d12364f07e8c42e0ed72ac869e537dd1ceab4798e9c4cdfbb41ed876e5cb066d4fd28a347ed9c0045c3a035c9f7f46fcf8fcd8976d5a36556a4f69a61d2488074af08e2a25ebf6732c221f9df6d3381f48f1d7706beba59646fb4a2be8a7d30f24a17f2dfe453ed7493944257b0b69c0782aead72252f1b68"}}, &(0x7f0000000200)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "a83833c5810cdbef013c63c73b8f1976f01b896bf68f16c09e0d09dd52121162d5f9a9cdc8fb7b9a6a6e8728fab4f6a564f243130604e519d756d6b9f032f1674998472b903839906c9e9bee6f7320fa66b28342c1da450029218b89a60110df49aca7c348c95191641790188d13a22cd294f3f56c2338b8ff917bc7fb92a9b91fc9a2bbbfec4a55643992"}}, &(0x7f00000002c0)={0x0, 0xf, 0x8e, {0x5, 0xf, 0x8e, 0x5, [@generic={0x6e, 0x10, 0x2, "bd675e3811fc2334808d2ce5bafe6b0aa11601da7ef368b279728a55aecd8bbaf93ed22223d17941ad04a6d9195426424f2153b1cc4ab818292c6e75f3c9b0fbac7c998da9643f1d7c99d4cd21ebf6334cd9790383004eb775df377e895c924b03014900c5ca0a12b6662a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xc9, 0x16, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x0, 0x10, 0x3, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0x8, 0xd, "8c07eddc", "f447b4f3"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x8, 0x4, 0x3, 0x1, 0xc, 0x8}}}, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x40, 0xe, 0x68, "b5a7efe70b36b16f6da5584bea9dc6cf894e658d12cd34edee905abd7e250130caf03ef7433a21af5d35220f144ca5ba4028a0f443d9745a122d16af08bf44d68cbd13050000029441c79c818f088761d1b1e90b9f70c1e92658bfc5edd625d2909d5286843693f0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "fd16"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "e0d7"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xe3}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xe}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="20033300000069df7a"], 0x0, 0x0})
executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x5, 0x8000)
ioctl$EVIOCGSND(r0, 0x8040451a, 0x0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x42, 0xe1, 0xd5, 0x10, 0x10b8, 0x1f90, 0x685e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x5, 0x30, 0x0, [{{0x9, 0x4, 0xf0, 0x7, 0x0, 0xad, 0x48, 0x76, 0x1d, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0xffffff88}}}, &(0x7f0000001680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGREP(r0, 0x80084503, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x4, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000004840)={0x14, 0x0, &(0x7f0000004800)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000005b00)={0x84, &(0x7f0000005640)={0x20, 0x0, 0x4, "9af06911"}, 0x0, &(0x7f0000005780)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070020"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x2, &(0x7f0000000040)='Qb')
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, &(0x7f0000000240)={0x20, 0x21, 0x101, {0x101, 0x22, "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"}}, &(0x7f0000000400)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "85e087ffa1942fa7a26d988d791b21e0b274cac5caf389003d657e864117111b374eb17034b1b05639b923c6b96db816c1ddc572594733aca28753e9351d155f7bb9a5c025a1db149e6d846f20e34f3bf3a892e92e95e56674ddc98cc9d845652d49e69ace6e6f9da9d1c52d6bdfb700b3a4898ae358df47a2fedd30f9415646749b8b19c9cd3ad618d180a9893cad9d4a6fdfd6c202da35aefd07bc623780f8d188e82219dadbbd5c66419cd6e56bf1d1"}}, &(0x7f0000000180)={0x0, 0x22, 0xe, {[@main=@item_012={0x1, 0x0, 0x9, "ff"}, @main=@item_012={0x1, 0x0, 0xb, "ea"}, @local=@item_4={0x3, 0x2, 0x1, "97edc53f"}, @global=@item_4={0x3, 0x1, 0x4, "65c005d0"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x59c}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x17, 0x5a, "9ed7d77bc02e1cc47814a1d10d081c4a0f3003d783283ed2983a412c089ade18603748c79ac9a3d5fbc2cdfe185487550e941570f2d78989d7841a9f741de7cd0a305650335359b8901e34bf3483def0211040e1810e37509479"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5c}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x1, 0x26, "727fbd8644ec15485a125b4abe0b3504332552c3436d9f7b6876b7c462bb0dd184c3821282be"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}})
executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3ff, 0x2001)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x3, 0xdb61, 0xe984, 0x3, 0xceb})
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x8000)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x9)
r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xce, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4e, 0xa0, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x44}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x7, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0xf1, 0x7}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0x7, 0x9, 0x40, 0x4}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x1c8b2d6ec1958bb2, 0x0, 0xc1, 0x1, 0x5, 0x7}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41e}}, {0xe2, &(0x7f0000000200)=@string={0xe2, 0x3, "7f6fe459318a29d8e7749079d8e7a471bd5f16936a92d55acfb57566118ba6e50cce009d4360c4ea209d4acac155b3e905d3b87d3d995993949c681b58a0e740ad63f92a6c8eda55fb8c85023e4079c6651d8aa12209781b65bf3bdda4e2dc05cbbdd3ab8bfcc46ff0c4aa6d2dfdbbd51473b4ced400c85f7e0029ebb86c834baa377ff40b35732f7accab5276a9b444791dcc4f049414a8802b4e7740bd5948d865fdbd9741c67c47f5487ffc8ab812a18f568233dfaa710ebc812ff6298676649234a0284720db188e071d3ffc8f6d9dc436b2489a8563902cbfe7a84e1ce0"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44c}}, {0x8e, &(0x7f0000000340)=@string={0x8e, 0x3, "5e64d208537683803ad5eee9a98a27f9cbea6932ce36dc9d205d87041357f7a6028fd7535dddb8a35ee7cd3ae1d1abbeea93c6e448e11d2af0e2da275e2022fbb6a0a60585c11323c4abb1fb6eb4cf71c2ed2008b0b6e68bd6972bd909c4b0010d1356415590631e423a6d2af2eb62f35c34aad87b1975683ab37ab2aecfb1449b9b174ab7fd676bcd14242e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40e}}, {0x78, &(0x7f0000000440)=@string={0x78, 0x3, "f6dd037b7147db539383079e624023b62e7862610721f20575375bf067e6ff4299fa5f6b7875fe490a57b059f0df5cf194a02c933249dd23faac864d569777fdb27cb498b6ea38c4bbf2fe60d77f8bc234b38a9f9a9a33d07bf915452c83aa0f5fbed279e096e4e2dea30b50c63cbbc541b3d7ffee25"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$hid(r2, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x0, 0x21, 0x4, {0x4, 0x21, 'cH'}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, &(0x7f0000000600)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0xa, "f177559c"}, @main=@item_4={0x3, 0x0, 0x9, "d5e78fe8"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x97a}}}}, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)={0x40, 0x18, 0xcc, "9fe280fa4789db45bb0e5de96d2bbb6010d2029c6bf753cbd3d783d50c927decd6d57ece1e0d88099e67b901ada2f09d0a356b6a5785f267d31dae8c651be3bffcb1bcf9afe035e7281f6fbabae00bf6dbdb5b8b74b0cd5b70c4e0f2a6267909fe18e90d9b7f76647016eb3794c138f75f5d003fbd46a193eb7131ba849432d2c7ef68668aea01243af3274c8fec0f0edfeb0993a5d0a700f5c6c198a22c5f54d8db9fc8e42bf98b5fce5ac806fa150d1918d5bc856620d12c020338325936099fa66ee5628fcb3688db6e14"}, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x1, 0x94, "cdb05dbeba198f3c8c4eb011b0ae484a0a4d1c240370d6d285e832a9b55fcbb3e016462f8b7273407aa88af0fdd39392dd621eaa3924d9c03f08fe5be0d2ecbe9e343dcb0874036fb9d0d64dc9ff89be6b49ba55739b17c7b759f57c2dab0454086007326404c0cfe11d66c63ac2d8950acf9516d2c94bd248e7d2b8a5e5e93533c6fb0f716e141d16c9b5679c2f4fcdf88bcb21"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x3}})
r3 = syz_usb_connect$cdc_ecm(0x2, 0x6c, &(0x7f0000000980)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x93, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xc4, {{0xa, 0x24, 0x6, 0x0, 0x0, "14c72e3650"}, {0x5, 0x24, 0x0, 0x5e}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0xf146, 0x3}, [@country_functional={0x8, 0x24, 0x7, 0xfb, 0x4, [0x40]}, @dmm={0x7, 0x24, 0x14, 0x6}, @acm={0x4, 0x24, 0x2, 0x1d}, @dmm={0x7, 0x24, 0x14, 0x0, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0xdd, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x7, 0x5e, 0x4, 0x20, 0x10}, 0x14a, &(0x7f0000000a40)={0x5, 0xf, 0x14a, 0x4, [@generic={0xd9, 0x10, 0x16, "c109326f07d3a3051d490e16c3f007ea724852ec8f630d5ea572eac9d5ce97caaa60a1cc3ea6397911ce1a87c2923c109077c6a6a49c9310487b3cf663cccc67db5306b6a23dd8d4cd11eec3729e51ef943e93a66627f053fa5defed133aec08653b3c4d3e8834dd2fe202d3a1279ee6431f4c85b15c3543daaf3ea06dbca437fc6e8041f505ae1d7dbac1f7558bd0004e2d1f5021146117411df07ecf1d9245126359bbc51ebc1a0acb48cc48f8bdd1b89585f3f82e8c77cd79fb2897125ff599537fe3ef663039201a024cbd56ee8743abcf4d3155"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x61, 0x6, 0x6, 0x9, 0x9}, @generic={0x4d, 0x10, 0x3, "eb1f937b5d6bfa2b74f0f9e890cf8b09bc2e721c5d5a90e425dd7b49fd679ff4574197c314900976ab99b6ecfe90e42379624976ce8fe397655a0a790fc8365cafdcd8628e20b9ea5114"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9bc8a4f50d0060fd3f021138e2663cb1"}]}, 0x3, [{0x8d, &(0x7f0000000bc0)=@string={0x8d, 0x3, "521a865f5a425e5d34f9527f1f38bbf3d81602d7e0c5c1a4785e07c3a689f437afe160e72ae2414ddd2723ac47024214763ca99f982e847e5b09e04d860fcfd32a2b1a3c2cef7331b0351eb96c4a167d0604a451dbf80353badcab1c2ca78ffbae39293e2675e582c2fa6ab78ca73f94ee54d979221b33ff8ae6419d4631caec01eaf1be438323386ed11e"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x814}}]})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000)
write$char_usb(r4, &(0x7f0000000d40)="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", 0xfc)
syz_open_dev$char_usb(0xc, 0xb4, 0x5)
r5 = syz_open_dev$hiddev(&(0x7f0000000e40), 0x4, 0x0)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000e80))
r6 = syz_open_dev$hiddev(&(0x7f0000000ec0), 0x40, 0x4800)
ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f0000000f00))
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000f40)=""/87)
r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x1ec, &(0x7f0000001040)={[{0x4e, 0x4e00, "e2118d63d307d85a351b880cb0e0eedf5e8de651015b7485b79cbfe561db9eb43a4521778038c50c16ff15122f983a013f7c8be2a4ed87585103c6179fd0163cfedbfdac6ad301e052d86dc37265"}, {0xc6, 0x4e00, "5fbbc2b88934a54225002204825057a0bde70bdbb878eb139510c95308427ce2d34e9b74f08b765adf73921abd094bce958d01ecce68af374b73d55aa92644d88d131d46f983da3c66138f3f0ae409d68a534def24bd32531daa6cd27de435c85edc4a3828dd538a37c912c5256aa28e0c08e64730e0e2706196104280241fbab20876def3c5d3dc69c2388f384d7bb29b4f18445dfa0a042f0201e6f70e842c581eb4d94b9f0ccb6619f24f3410a056e86b76b0942b92654267a7a5a5f37b376a82e5099cdf"}, {0x4c, 0x4e00, "7a5b256788c1d1d4b9a973169cad3ccac9e8c35acf1fa3360530419acbc6c800377fcd116abb9a228b68a32bc891f1ab1ca207f08cfa5be6329e9a747c4e5d84b2728bbdcc2e492b623aee8e"}, {0x77, 0x4e00, "87e7f79053346cd9dbc0e9d2d923e7da3dd6ae11be9116862b74d2ed4e93ee487c7de1f3002a4e94cb75b418863534b1686d1faf8bf8fc12510547c67d193048cfc45c93b61ad4062892daa1653de600a362bb8988cd0c12db5c412685d36c6e468a73b2efec8c76a526afaa503e2695012b2c80124712"}]})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000012c0)={0x14, 0x58, &(0x7f0000001240)="70363ca9670cd9baeaed41e88203b21c42bec392c2fa925625c8188b3e84c6a549a12737b28f8f82939ad6540f6bbda6295f91b6b54e2728fad8f45a4853faeeb5e00a5d56eeeaa09a7e1a38cd2b5bd02cdd4d50593888ad"})
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000001300)=0x4)
syz_usb_disconnect(r2)
r8 = syz_open_dev$evdev(&(0x7f0000001340), 0xb5d, 0x80000)
ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000001480)={0x15, 0xf1, &(0x7f0000001380)="5ed0f28076a1cd80a80aa0fa65d0c951b1c5f1083691ba458d73fe5efdd8b1c0097e074ed58bf4c57e98386b2ba6e67ae67c1db5d113387385dc910f88f5aeaadc9a755ee3c925fd05ccadf5d8453bb4b0971fa7d5cd4d9f02dbbc6d57008e12d5868f327cef8bf65796fb089e91a845a25e6cea1b088626b596d5556b0507445712e2c841cb204b157742ad60519fcbe0d98705ab88ecd49509266ec0e2eaba056d75586eb2bed2a34dde77da435105676b85f5e3f8894a54e1e5c36536b674a2c3ec3a8be59ee61eab043d7da338c5ae384253b8a4a6835400e2fcfdd8b3c0dcc99d4c3ba123efc5a208fc6f90c6512c"})
r9 = syz_open_dev$evdev(&(0x7f00000014c0), 0x6, 0x400201)
ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000001500)=[0xfffffffd, 0x518a])
syz_usb_control_io$hid(r2, &(0x7f0000001780)={0x24, &(0x7f0000001540)={0x20, 0x24, 0xb2, {0xb2, 0x22, "eb90b8540a64f8f3a7c24a3117f3183bfdc89cf86f89beda60ab19fe301a41c04df9533be5ccd00f42ecfd2afad7cebf5d48558fefb7d801414c1eac726b0231306c49aadf446c8e7dc40faf82a2e831c7462dc92a7f500fcc3fd23b0204b85287014a1c1fff1c07d6b46ce7dc1c4e6fbf9a2a50b40f287e507a16c3c8e39a95cc97c04c94533b5e5e404ca3c517226dcc42902f8db12d220de951036069c8cf409ecb1bd3015adef7296c289da20a34"}}, &(0x7f0000001600)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "6474a14a0de195ef019ab325deed7927381df66fdbc116fdf34f310a307de7e1242f59f2d979a4cfb2daf81dac9b80bdb0d8e68dce19ac911b37e39542c36959a296e9fa5a80ac0ce9fb3a50e284799e82857a15413bfacdc310a05df19b01ae6611df477d866d1f4144a0a6ee266deaf00060a8e053239f2b7f128a9fab182dee0262c98879702958d5a7711e52d4973e8d63f506cab6e4dd97a817ab53c6c8941580c6f149ec40922bdde07223c83f88621935c9449ee9f7dcfe8d3bb1e13bc6"}}, &(0x7f0000001700)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xb, "d170b1df"}, @main=@item_012={0x1, 0x0, 0x788f71092158e3b7, "d0"}, @local=@item_4={0x3, 0x2, 0x3, "43e584f6"}]}}, &(0x7f0000001740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3b, 0x1, {0x22, 0xd10}}}}, &(0x7f00000019c0)={0x2c, &(0x7f00000017c0)={0x0, 0x8, 0x39, "d327601db12e7466dcdd052a4559ff1c1b157fba30a2fbc15885e87ed341d31baf14f8d9f725a90c307e31e35ad4c310697c8c10221a8f8e18"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001880)={0x20, 0x1, 0xc0, "a10fe4a23baa0e413d894d3fa1775234a4384115d08bbffc1b205bfac705b8b37983b0066e62221e1768ecba3981ca16f28bd15a6d55bca7f659c4b15600fee25dcdea9c15144ae67a1f7dbcf7248339cfff5d2bc187bd42102361df59ce28a57c6a9351fe63c3c54ec875b92bb82af7e17697ad0bd617d552a0b11f720ad09653616069b8e7cd6427f34317c102b29787bc1963250dec08f5347885614c4a6da2dac4216265be38149501ccfe60511bb9279ea4bfe0839737b39a929d7b2287"}, &(0x7f0000001980)={0x20, 0x3, 0x1, 0x80}})
syz_usb_control_io(r3, &(0x7f0000001cc0)={0x2c, &(0x7f0000001a00)={0x20, 0x23, 0xa8, {0xa8, 0x23, "78ad60f2013dbdfe49dd588f71dc711dfcff2dd61dee60a5f939bfbc99c3c877d9988ef17b472845ee7f0e244fbd7d6aee1b371dbf3219e9025487408ed38183b18c1965452a7e9876bff00ed5c023644ffa4060de55eff038c4fa07f21d160dd95ce473f1574f1627a366adac9051e167d66b6d218f2a8c2174ed41cc978274d5d1aec43ca0cf3bc97e42a224f97417ccea5583525f0ba4187267a0393e42c9a2faa385af6e"}}, &(0x7f0000001ac0)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}, &(0x7f0000001c00)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x7, 0x77, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x5, 0x4e4f}, @ptm_cap={0x3}]}}, &(0x7f0000001c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x19, 0x9, 0x7, "0e2dec06", "e8451e25"}}, &(0x7f0000001c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0x8, 0x80, 0x3, 0x3, 0x8000}}}, &(0x7f0000002180)={0x84, &(0x7f0000001d00)={0x20, 0x14, 0xb7, "39d20fed4ce87a8c05bb57e0d2786f53b8456ea82d84a37f0e286838da3119d3bc9daf43613ba27db4c67c2ca8ce9313a94c324ecacc41fce8dbdece18d564b6e7080c1fbd38112d923ae746682a823d3a5fc121b15cd463af2740e59ddcce24cde1ee6767c9a679ba0b0cb5e70572b2634356e5c74ef1b0937da70e78bcec595cb792a6e8f49c96caa5eaf7dddc31ce4b640a93e46ac46bf54cf75c6ecdef8d5636d9eacc65a4bd0efd77c3fb3be7d937a8d0e6758a42"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001e40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001e80)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f0000001ec0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001f00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001f40)={0x40, 0xb, 0x2, "dbf9"}, &(0x7f0000001f80)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001fc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002000)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000002040)={0x40, 0x19, 0x2, "71ac"}, &(0x7f0000002080)={0x40, 0x1a, 0x2, 0x127}, &(0x7f00000020c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002100)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002140)={0x40, 0x21, 0x1, 0x3}})
r10 = syz_open_dev$evdev(&(0x7f0000002240), 0x1, 0x10600)
ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f00000022c0)={0x56, 0x2, 0xfffe, {0x1, 0x401}, {0xc74b, 0x5236}, @period={0x5c, 0x8, 0x40, 0x0, 0x6, {0x4, 0x0, 0xf10, 0x2}, 0x1, &(0x7f0000002280)=[0x101]}})
syz_usb_connect$cdc_ncm(0x6, 0xb7, &(0x7f0000002300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x2, 0x1, 0x7, 0xe0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "8a67b1707c"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8379, 0xfff9, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x6cb4, 0x9, 0x6, 0x7, 0x0, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x11e}, @mdlm={0x15, 0x24, 0x12, 0x828}, @country_functional={0xe, 0x24, 0x7, 0x0, 0xfbff, [0x5, 0xa, 0x8, 0x2]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0xb, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x20, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x6, 0x10}}}}}}}]}}, &(0x7f00000028c0)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x310, 0x4, 0xff, 0x2, 0xff, 0x9}, 0xf, &(0x7f0000002400)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0xcb, 0x9}]}, 0x8, [{0x87, &(0x7f0000002440)=@string={0x87, 0x3, "880232bc8f0e4ab50863a61032dc4a2d429a3fd0c24fe795c86782c9d8eb9817f8855b5b6c4754f7a8a68a858e72f7b5a15881d9a99064ecd77dcce999c4cf507a09b23b40636f2a78fb759e581e20d2614f35b6b45a5e52474e233b83e1975c66288e21d1e8489d0e2ffa14010b085a116d4692c7ba6512ed775088866aba6f368f62b90c"}}, {0x44, &(0x7f0000002500)=@string={0x44, 0x3, "2322b9149f53fd526947ab637aced39e0490cb95b37b54375eb5039498cb8892fafeb3f128d5ec52a0b7425a6b3a78c020f51b77d7b565cb4f287534d0e0a0d91579"}}, {0x83, &(0x7f0000002580)=@string={0x83, 0x3, "a23c6d6179e19fb2343e384a289afdb3c1ef98888de806facaeab06d978943462eaf3baf850729c781223d40300088b8f18452afed688263baafd2031e427783a9eabfb505b80b103ccd0d7c7801520de417e18597fa43a54ca15bb04ec9eba29d21436a6d1b318b382fea146770a940090af155d1966efb4359e9a23d11eaa9ff"}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x3401}}, {0x31, &(0x7f0000002680)=@string={0x31, 0x3, "e8a98f62e9e68b152d6f8d60711f6d138fbc1bd1515df16eb8cfb9206a365f758abe0d22a9511c3376e67e8b68c230"}}, {0xd9, &(0x7f00000026c0)=@string={0xd9, 0x3, "42c7a48f85c591523f09d4782f82043235ae752198869ce37e78f1aa4c0285a52a46a8ce2c72ae67863df2ea8988d8b40d6d9fad7e57b6373a1e0e0d7c2161e4a7ccd06a3a05b30b517d2e8677c99a33493b56768d90aca32259a7449c82fbe55f88f20431a4d6c3648617a1d2b6792a76dd39df90bc78830d74cbbcdf2887f34de4487b085a51444cc2bce4404af4e51a2e16a29344b0bd1b02b51af835e34746e24c15e1559a3b4c9b812090a2836ffb8d21350d5359d389be0641feaf3b4a58c7f23bbcc5011dc8be327e1fdd99eddcbc7fffea35ea"}}, {0xb9, &(0x7f00000027c0)=@string={0xb9, 0x3, "7216ec29a1b9a8dbfcc237f4e23af758aca6b5a12dadca38c2b0775fabf0c5d26c3f5f65a383fbac9863befc58515cf415532f1a5c7d0707feaf3d8dc7de62f39901e35467eb63d080eacdeb07bafbd341a969ae334b189116c980dd629a3ffef2e39946faa034591390452e88c3a478c8ec58f14661d838f656f4d32e73374225cac7ed9d90e6baf15c644aa7b2253cf817d63344158b869dfc2c69bd633908caa7a2cbca2e1f934aca3439a4028f4394958d53437559"}}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x41f}}]})
ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000003940)={0x14, 0x1000, &(0x7f0000002940)="b4f6e8a436df6adafee8506426fc0818a9d3e8b21f363da63c361bdaf6c6fe364286672ccfab76dfa43e28bbcc9ac250c0976143d89c7285b7f54526bf4266adbac523d141823e40d53f6784963eeb4622974852c270183753f33bb08f95042c431680687095d8cc42075e025542f49a05fffd2e0a4d1d87e98d3e168fa3074a9d2864cd3bf200903f0d4b3f0a74ce8b905d7abb0b24bad060cfeaeb14c10fc9bcff06439817d3ab40921cadf1b809a82dd9969ab8ebf05dfd88a934dc03eb66c42afcfd9b12b27e408e3fe3c2995c713f7ebd017aede3b8f94b64b3a6b04dc390a35caf3869db9eeb01016e58b20f0c64f579351f14e0938300f44ba8874ce41dee6344d278fe1d2030d6193fa399e95fb0db482d29e39c7ed4abb4ea3e9edace22fd5f8f5816cd62b4ba284ec283de5eca7ab41118267f3af583757e897e029ab57d7b71ee3f05c967b26029745d5ee29d0c6ab38e981f966f7bb420185e7be8a50744dfe3a5258aacc7c56f95d603dc7e61d82f62d19591442427c187c014779feddaeb894c07bcd47f7300c45c7a6189520586e4cdfd5377022e7902cd7b3245fea868d55c7c80d82f95dcd9947c091c65aac693c46c0efe8e75ff4dac1efc5cf3f318bff3ee0d3b1570133ff68568a87f64e8ffe232690e79479ebe6c9e1ba92df14d927ef9827a28c64de6af3fa72aea574f6dc3ef2f302f8932fc2bd8f8bce6c096f84cd6ea77d323bfdfca72afe5dc00d5b833ef79847a7ecc64e0910036e41f5db9af8099ab3e69182446688271eec88dafec609897ee5e2ade051773ec1dbd296a9573683420dd3bebddd232954c9f03027ec338bf4caeb475521254cb4142491e689708e6d3a1b02830084fd158267b1c8ae25ca587be8c6dcc198943ab3083a64275d3ba00f1c183d881abd8e2c5775d0f04fc02fa3fb66672163f855b9388c424a33cbbfc996c6548ef127b97c119800db070bb88be2be106d7938985d5409f6007746d01e3b7f4e8b21efa8bfd413646dc7b4b51a5141b8a93adcc75bb56e98f2240b54d83bc6c49fdfb966438160762dfc96c663d885db06c3fad6d826e231803814cdd21413ba558b18f579eab8656495e93acb026aa468f9dace277138737747db9683c1728d61f10be375e0c4071a9cbfd5ee51a65e7d70cde212632694dd861990646113aea690ced223dd209fe18745d80c86587d0fbc196da1e17011f9ef40fd88c514d5eb1c330136e6c2cbae76cb39bbee04f03ff2b4d30e77f91eaed9716ced6800f4c2be304f8bd49aa257d6b572f7e7b40867236285453b4b663d86caf6223b414c554b34cef0f2121e4ba12b76f1cb1cbe131951abf77a4bfa6985c3881f75402e4e356f462b5381134f24b9894c26b78085f510bd477878e3d03b1fbbf526a7096eb1dffd1fc9f24e7e39943e3c78689e77b42f93ecd0e7383e3b7f80242171cdab988a4583416329026020fc1dd6fee59a1b4a483705e9f7563857404c0f01d2fae381c10cb77f6baa182f60106fb84c7f1c93daf85f08b3af323f4c3accbc9a48f02f6367194f5587d08912338433c12e326f3aeb8351ee0e89047803fa82ffa7fe19d97afd64bf099236e8da4f031df5fe8a74f70271bad5393aa1db3e326b785711915be966cf182848575f8b48626c01801c12227de1e8db28b346a6a5913b90882c85756327a9c98b95d179906261a1ff58f392d8ab8eda1e6591f45e2d33002ed413a942fa1033ee4f60d65201b6e270125e65b7b8708ac4b8a554643fab43733d04cd496923a05ab3b76b9dc86d57078935ac0c4c7239e95dc502dcf79faf6daba574d1c23f49f3fb72d231ef36d430e7a98d37639049403f379d157a1789b40a2c4a6a57cf1afd61918db7ab0dd7aadd866b50718fb56d07abd734481c2872d76c58c536a036089314c0a7b36e43d7078a494acf9d9c9e6b36573e894c3727e915a3f8b683e7c3df8a7eaeebe972bc315ab370ebf6e538baba5cdc651f01e20055cb198c57851f28f3718cbfec46492404827e445531c8bcc86329fef33ae3a3e942c26f792eb325499f23a54d54fe2a0e05876d16eab7145ae65f8b8e94a3263fb65e87125a13ca5396e48e2fe7e33d5c1cb7e1c381a0cba771cb14cff721fbe6e9080f8f25fdbca0596ccb630dd8b878503376ffee968cfef8a7e313a216087b47ba57fdadb0db28e1b0e000e15b5515f17f4b4802c20370b3008014a62a5c3b3aa0868859d28c65ff1dab6f28470b72a52e4a82ded6f2984887166cddc4ca9778b9ceab13f399801465abfc4bbc6fa8538103621fb62cc4868e535be8895a48ed725d3fbe98ac42254cd894968f5eef0f9b5efedb280fde8c41a9cf6b43b8f8da1f2af42655491a62994b81a2ecea5f6e7eb8ce86c159f5a01bd5a00ba9a03d43e7f614de53fc30fc3448216265cf373b30c0f87da6b72fcc8ecba3672e791772b4910f5dd391635e04558a0919aa38b16123c05cfbeef886026cd531894f16b2ebd00a1bd8f056ffd437264003442e64caf0eaa7e9346355ea985bfb3a5e3ddb87ed407b8478069f6b098502fb099b53f349320c1352df770ef3f03fc57f0e58eb8f7f364232d9c2c4b76284b878c1e2e311014d1277e0ca3eb8eee2655bc8bc1e51eaed928e5e2610f47d6466fa66a3b52c088471b89c5d0c055b69e761e48a25c04d561b290ef675c5278cd032e7805112a68ffdd03957af54625890bba959575a69fc4cc98d86274f817a48ca24594b9ed0512e01105eaab573f48a493324a52eeec729d61a9d637a19770323f988137582a3498a537f75708f594b8b633ff1b4a8bc4d2125deb8783e6fa8892c985ebb8638189dee3fc313576c197f65424db8b8df75ff607545eea32e658dc185073101c2c8a16370eed76209f3ec86e0d4341f9ddd22d386fb37ed5a153853b5489ed7f78fdf6e661ae9ae28393abff9db159345c666f9c3f52eebd36d118bb63abf011ff1f9b4a4e784be8480af51d9f26246ff09b2d14d9591c6c7aaddac0c330e30816a8176f60924a6937cd242210ba2d9c95f9aaa5d4d0cf6b6bf0d6353d57dc30f698bec0f768a6b51e90b6d8806d96c790c53cf57031e7ca9540350c793ea3930eee50214ac842d5644e032ee17e6b2c3fabe1585faa701306432acc428174ea4e3ee6c98f0bf62a2d15c116bd553342b5f8bbf90581a171ea83a8b0e8ef09fd0cc2bbd778877d3721891533bb352d1db8132f0878b44b6344668dde3fb0c4f7a396baf7c4ae5ea5cce92d1b98b2c1f55cf099d97c91049d7c92b27b7a1ccb1b6550cff52429e9f1bc33cbb185647fcab88e33d62bba4f2b7c271ec212dab628f24befd0c20da60652273d4678644daea1048f998dc0dd4b1d8af141ccaed1a20336d08bbd5e19cf115d8b923e98379c4f97110d20f9e37a1ad0836356a3dbeed2c2f11a9413d3cbc25bd565ed354a41532335ea0c6d91f23caaafe50a908267ef0fd2e0e1fe1f0e1f52ccf6f198ec7cbbf3d0b231929f89440bb93f80a207b348c870b118b5600e89248ccc284757d59ddf2e4d26e283c32d5b8dc728e7bd321fb88e35ee4ba62a7ca5183e258f8fcec9a59b1e4b709f22c3c4ceaaeda83b40fdca181ab3cff49308d898d8302e9c37950440902e6646cfd80b82af52f1ddf58d022891318586985533c6b297c5a890ee78adba7ca80fe37a4efc509c3dc7005397723007613110c2737b439e9d68ad88e852432ead3f8c5f2f408db989817938b83c9e8604e17c8ae5f9fe850ea8ae74316f403f3c34ba239799df1c2b17b099457d73bcbbdc660dc6cf2014afd73754415e306d82d10a9dda173910de474a60ee6e83635856d9fd31c74e0c2e0073031c24ab3afd6b9abcf9139026d5a00324d36331447bfbd657692dcafaad3f9dadf26e4482e820ccfe5f59c92305774d6e5ba025b6cc97a254e4340d34beaf4ef85caefe66d6163c6bb1b1917cc8229dbc1ac7e5e68e450370c7f2b02959d57aebdf2278c523e3fad732a5db59a518eb757ccecf9b259074e499223f04863392ee48fb2d12d2f6701cfee3afa1a1c2b452a94f2641fae0316d8f81b886c95b8013839febe553c475775051bbf363950b4442e017f28d530b768d4ad83f7a7ede6ad291b92f8ba15d0f3c61741b51290dff4326946a292df0eeee481f439bf6d03ecd1ba82e0ce6598d2c88e2fbcbd8ca824411213e13892332da21909e5d8ce84ff087fb4440a37364ef7394fdddd004aad4a8e10a53cd7cf7478b51285e71ef9a36e1832a27f515a7dacd836dd59c11609e0d025856b4e328d4c546ff6d46cb71a346ad9347bfd34d03c93e9db7269e5dca3d8ffd86e4358f38a8a32a6945de918cccf87786178a0e29067353300d1d435c903b2d26326c1f63ffce22b07bb6cba4caf4b21fe8bdcf71604a27c1b8534b7d7eea79b9fd7216343d093e306f8b5aedc79b97e11ca3f63c3a6f61c10a594a2b9d53bbd9e7cd4e102882e9909a2a0f85d30f7d385d2b17f83c9dc91c700ce09263c33eb523f691d6eef83ac3e11886adfda33c7a0da73fea3fe45c0b9c4967b1fd23095f1ca9cc096f277f637860b3d58740cf7da0e9527268db1920d7c5a08b8e0eff25bd2d595eedf9a2a58c44351915e71d3e0df0139127a87d400f0b3517aa9e3e068e03db77fbe233450cf053bfcf7a84296051be400ed52546b7a7badf27a905ea21bc041552d56c9e2b2aba8176778d6820a02ea2c9cf79ca6c6ab2f5bd1074735d6ff43cf3012192cdba10b1a013234ef331cc782c22d39afde9126cca80c149c23ca1047e9509d60fb1b0f97ce4c18ff66924c7c6b9d261ce2ca621d2ae2adde58d6be9ec63c8363bf5386da363779ed4be00f4eb8227027c10a6de556f340dac41c439384123fdaf5f55dcc0769535263ff574859099fc7833c2d5d33f9e1dac7a37c1a3c5aeb78bafcc079ce276ced494fa1ec4638b146ebda393ed7ace228916769c4ba85698fe42973245bd99a183cd6abbd2084accb38b885cae7f104b2ffbdf5cb06b4373114dd950c0d8aa25601c2f6459f6ad0b108f3565e10d8e0e4d932cdfd0ad33b22f079742db6beaa95e86ab78a94fb33da2d5fe626380ca5ae518e8baf4f22debb906a09478e8386a880449c1bf61d6bda42d591db3f969d7321b0691bf2c9019666f8d58195ec8801c0f406b421c4d2f756d7bed897a6aa6c486a1cc6bf022174060b9721a4a354168f4b7715d4094d6547f52c9a9d189aa0bf421ffc20e32a3b947b470d2078e1dcb7cb325835f02dc51fadcd3c6393093a83c74327ec3c10988d2208a706b21bbc0a3b671300486b811d6db6a5b57bc5d9c23a423a1aef4253e7e4276a26bb22b4da00fb33a15c5c7a5ded4fbf68472bd9714a359b30ccc2be439388600ebfa1ef26ee61e410d77dfbc79ffd774ca37c7cf2d259f8cd859266cc365bda5b08a2ef79f0594bbeacd0b77d0922551db90a7d7b8e499714bf53f82d7ef134a81bfd84bf9a9106271333cf7ee1e4b32b7efc66d647b44a3f2a7e3aef8ec28973822ca29f05c1467e47248c0204eb5011f48e93c21259240afba785a2feff16416e28b46f3296b9ce4ba8f81f25577838ebd92b15c30ab727fd362906430f3dccd207cdbd76c4e2296a9308ccbb37ef19350515a6d8032ba8c36128d01f458b888c926fccc043bec502490362ef4f3389a4806482c8da3d5f93ac2ae49437fced3f5911b9c1790a5c9b17036e55c98e5d7795f6d12da47f45d127426fabb95718cb998fd8d"})
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="4010980000001c60"], 0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7a, 0xd8, 0x83, 0x40, 0xd46, 0x2012, 0xd35f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xe3, 0x8e, 0xd3, 0x0, [], [{{0x9, 0x5, 0x9, 0x3}}, {}]}}]}}]}}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x0, 0xa, 0xf4, 0x77, 0x5}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)={0x20, 0x1, 0x4, "ad610d13"}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x14, 0x4, "1df73cc1"}, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ece2"], 0x0)
r0 = syz_open_dev$hiddev(&(0x7f0000000400), 0x5, 0x20240)
r1 = syz_open_dev$evdev(&(0x7f0000000640), 0x7, 0xe30002)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000680)=""/44)
r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0xeace, 0x80)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000600)=0x8)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x10, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xfff7, 0x0, 0x1, {0x22, 0x417}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xf0, 0xcb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x2, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6, 0x62, 0x9, 0xff, 0xb}, 0x57, &(0x7f0000000080)={0x5, 0xf, 0x57, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x3f, 0x10, 0x3, "184d987b1f0507252fbc76f4a4a4c51ae0a18fc81e1abf6dbf2a1c369f8f88a0429c5d2ccdbc4fb030d3761a1cba94e85cd1e52fefcdddfd08c8f7e9"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x6, 0x8}]}, 0x7, [{0xc5, &(0x7f0000000100)=@string={0xc5, 0x3, "35c04331851bf14ebbe5ba24967c946f68c2aa4a5cd0ac2b87653e4844e153d50d99404ca4493bbd26b698f2c34cd311e0b7fc0ce3e25761a05f5cc53bffd43924ba43515cafbda01fb4d481781ae22030f95ebed88ce4ed9a2fc524f427c5adb71e00e4817ff5e450836e1c25915bf9cd5034f7f6ef506a46011111cb917acb0ab0ca185fbcab61c499ef67358a41e5b994e38a44496d69f6cf567fe6283ed11a3ab045fbe323242891730f27c5561aa4c3759139b8fc166ea78ec1cf181e150462bc"}}, {0x83, &(0x7f00000002c0)=@string={0x83, 0x3, "263ccc33fecf3cc1b07c7521dc739d7fb312fbe6656fb230846195bad9a186d5bbd1f0d263cadc935b63fac0f27d3d7e74d87f5f1b0ab0ff586416c483374402639cf9f914ca66ddd5be681857020c86c494a5b67a5ade438fa6bf0b3a276756a48e12acf7ce2d1e825f6b95f2c4ffd44be5e43c8a0159988aeef1365f4cf79a47"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc03}}, {0x7e, &(0x7f0000000380)=@string={0x7e, 0x3, "302c85b58cd413ad6fcbca91eb5ebf34042892309bbaaf391bac270d4e547138844f030c009ae16724b23621d91d680b9c07d3f1a7e8bda47578c7e23a07c6aa02cb15aa9bc1744fba5b5bb5aacfbec9ffb83fc3724530aa27f0fc849a5b509788966c66539c6d5779a3ff2d86dcbf58655cbe942f3524ee1ffe3763"}}, {0x25, &(0x7f0000000540)=ANY=[@ANYBLOB="250365707ee23e287e2b66530e0000dbc8234d79e25354c08cdde000ad49576f805875449b34cdce44743679d778d5efb49fea59226652ef805be7ee57fc82c681787121ad578cc5e05830a06488dd584afa40fc1d27f7a4608aed37"]}, {0x71, &(0x7f0000000440)=@string={0x71, 0x3, "e298a97c52a94087f8a7b321af05015214cdcc6f2ee62172be1a39fe87f2da63c29d6ead64ce1d3704401ec3408bd4cf76b0d9aba4af95f24c748adafff5ff39503ad5095de440be26a65daff0b50a9dbe493057c42a99f7427f2cb04b872bb50528bf0865a89252db76e28539ff9a"}}]})
ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000006c0)={0x2, 0x1, 0x4})
executing program 1:
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x20, 0x11}, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) (async)
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x32, 0xd9, 0xf6, 0x10, 0x1164, 0x622, 0xbfdd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x9b, 0xfa, 0x0, 0xb2, 0x43, 0x9a, 0x2}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x140, &(0x7f0000000240)={[{0x7f, 0x4e00, "7d1e1e219988880c3b84157a6f331145b55a9f12ce9d487a83f54bc06f2e1c1ac8cadb1ff28f6b232daa7dc6d0c18a76f140b93ce9bb2be7666c841c028f17cb972b1b4361132936351db882471f370cd23eab31f35b06dca81f3295d0c84d7293d86a548ba642de35f853225a48b449ae827d8d98047f31d443d1fdf180c6"}, {0xb8, 0x4e00, "a23ce59d7b4a51ba0f19f4b31ebd05c2f4c7dddffa789cd701a667e701f21f158b1ba5aa451121fe1195a5cb631ff8ef78632acba99f1645f0bef8602322042fb8f49b800cd64f21f8014dad5803b83aae7e0367ed70d6699fa371fe7785c72546425d38a12fadd14952deec14c9dab5a46f57e0c4f4859458018888b8d6b9bf30fd7a7246a43a504154d242ad34c798f14bcdc40f902b000860361995e91600350456e877dd857ef46952768970d4bfdae622da6fd5df30"}]})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001480)={{0x12, 0x1, 0x0, 0xd, 0xb7, 0x5d, 0x8, 0x9022, 0xd421, 0x1359, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x0, 0xcb, 0x58, 0xba}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000001480)={{0x12, 0x1, 0x0, 0xd, 0xb7, 0x5d, 0x8, 0x9022, 0xd421, 0x1359, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x0, 0xcb, 0x58, 0xba}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000380)={0x40, 0x7, 0xc, "b99f5f0a704812ecda82f8d84cbccc8d8702b3a3b1118f00cc0416065e5db6ff38d1e18e24435a71cc91b965cc04f5b48beab010e9cb098320333fdd5fc99f944d7fad01b9d8ee77b69d5facf187d871b90a884396252bf7ec8030a539bf49d6a076dc9d452d0b2edd29b9395a4fd01b04fd8fbcac76ede039570f609593c203d4590098fce8edd1cd7ccf1baf5878264f76cbcd804226c15305405d25c4d99e7da393533cfbe9b6f409d36704bd1644d0da59cf"}, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x503c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0xeb, 0xad, 0x8, 0x1608, 0x207, 0x438e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8c, 0x66, 0x2e, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d934a18c"}, @main=@item_012={0x1, 0x0, 0x0, "a5"}]}}, 0x0}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x48, 0xd7, 0xa9, 0x8, 0x7b0, 0x6, 0x9ed4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xdb, 0x4, 0xc0, 0xe6, [{{0x9, 0x4, 0x93, 0x4, 0x0, 0x87, 0xce, 0xbf, 0x5}}, {{0x9, 0x4, 0x93, 0x2, 0x0, 0xff, 0x4, 0xb, 0xa}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2087, 0xf01, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xd, 0x10, 0x1, {0x22, 0xd37}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x5, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0xf, 0xe}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x4, 0x3, 0xff, 0x2}, 0x1d, &(0x7f0000000140)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x8, 0xff0f, 0x7ff, [0xc030, 0xc021, 0xf]}]}, 0x4, [{0x3e, &(0x7f0000000180)=@string={0x3e, 0x3, "308c5c939a8b5f261e42901f10823a19b10d00d41735b638a140b016606b5b32e8dcbc058ef534c11b4f4d2e1d373fc2f44fad1ea04d1d2f9af8749a"}}, {0x82, &(0x7f00000001c0)=@string={0x82, 0x3, "8d667636ed3404faebce76e09adaa4f2c0dad914f0fc45da5e0ecfe75c57565b493e0509ecd38838b331b2863678b97d0216436cb47a6dda833d3cdb595b15d0a1519f5737a2f26b6ea5113cc819a7e293727e4127e177fb98fcf68727336ba49d21a7c5f53cd1db9a456d4ff51bd3c216593299f4dae547a08b8479c3a6a2dc"}}, {0x59, &(0x7f0000000280)=@string={0x59, 0x3, "d05073965495a51a389e517862aa6505edec7fff341ffe6e2780a30d4490e62d4dd47f8224cfde8591c03e3ff2815d7fb6d71113b5421c0e66e5f7b33d0bdad7460ebd3cb103cc45bfbc839012ff5d0d7e8f8e26942dd6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}]})
executing program 0:
read$hidraw(0xffffffffffffffff, 0x0, 0x2)
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x84040)
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0xbc, 0xc4, 0x10, 0x4e6, 0x5, 0x1ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x8d, 0x2, 0x2, 0x62, 0x92, 0x18, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x0, 0x6, 0x28, "2534e06dd7b5b5689c9d2683c1f79f7cb0504fe0aa4d5e46f95df6e33320d598bcf98032f80d2d40"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="00310101"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0xe, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x6, 0x187, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0xc0, 0xba, 0x47, 0x10, 0x77d, 0x410, 0x496, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x175, 0x1, 0x0, 0x3, 0x80, 0xf6, [{{0x9, 0x4, 0xe6, 0x0, 0x3, 0x9a, 0xc, 0x4a, 0x14, [@generic={0x1b, 0x8, "d7b056a97e21ede18036f583d0d76d0342ac3e697d53d7c3bc"}], [{{0x9, 0x5, 0x2, 0x4, 0x200, 0x8, 0x1, 0x2, [@generic={0xdc, 0xa, "7fe2be0ef34d6853f61956dcbd64b29ddde732c528504ccee5caee55c8b04c419609ae352a2b7419bcae75a5fe4fc09ac49fd9e5b4e808ec5e235af3ad3be215b15470b2a8a3b201a4e4d140913a986fbdb8b2a6bfb8a0a91f1de7a5472a7ee5779dd60699876629e7ab8e77d4150650b2a20a7fa6d83c352d676e0c02874b9ed545c76c54cb37834b26760c9b0a0909c7989891f9407aa30f383094cb027ed674d89f7e7b368181de584e317a4e0c30833cad11a01d865171b8868e26eaafe332adc7683ec741de35afb0e31abe03c735845b2e32ceea0d312a"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0xcf, 0x8, 0xc}}, {{0x9, 0x5, 0x0, 0x18, 0x3ff, 0x10, 0x4, 0x3, [@generic={0x51, 0x5, "4ee3b148ec689329597d83259f908f5d8dbd0d42f655d60bb6af9b3ce055ecd3e510f51203e37d0abe6cadfe96a56917ec031a5d5ef4e0dfc436e1cadabfed419ce2cbe7a27debfa2ae4c49c5c5388"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_ep_write(r2, 0x9, 0x67, &(0x7f0000000140)="041ec4ae1d2f731c27f3594fb22f5e57b42ced59d6dc0899a36a2ea56ff81a44df6a74080abd4b76ddb6d07cb2756bbe4bb85655af4bf6ac6bddf16bae357b5702c34bca4cfbc6b0f140fde058298ddd04eda889d6e3e727d7946c70f8db3915eaf75f800cf8d2")
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0x3, 0x4, "3b8830fc"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0)
executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x89, 0xab, 0xa, 0x40, 0x45e, 0x445, 0xdf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x87, 0x3b, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r0, &(0x7f0000000100)=""/74, 0x4a)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1aad, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff05408dabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501ee"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2700)
executing program 1:
syz_usb_connect(0x3, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x288, 0x91, 0x70, 0x19, 0x20, 0xb05, 0x18f1, 0xd7cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x5, 0x1, 0x30, 0x4f, [{{0x9, 0x4, 0x23, 0x9, 0x3, 0xff, 0xff, 0xff, 0x2, [], [{{0x9, 0x5, 0xa, 0x2, 0x8, 0x4, 0xb, 0x2}}, {{0x9, 0x5, 0x1, 0x2, 0x7df, 0x40, 0xf, 0x2}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0x7, 0x7}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0})
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xe0, 0x1, 0x4, 0x8, 0x3a8, 0x5732, 0x5e12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x4, 0x3, 0x4e, 0xfc, 0x55, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x4, 0x56, 0xca, 0xf6, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000082505a8a44200010203010902240001010090020904008102070102030905010210000088090905820240000e04fa2a73a6b202f7482e204ea121c3839fc1286e677d47bff7afb95986e3f4084432c6237e2820707724620cce8026ceeb40f8a0bf1e0f2ce2889d6de3674aa43be4401578e803235983a58b6992569ac957abc7576d0661d8b285b6a54125230415c7c86dda218ddd16613490cec4b8dcc9c30cd3d3b9c8f72a17538526f3c040ee7ef8c37c5d7fe44a669ec28e2e4d7daea9b51632df84ec2f86d0e86db85386ac77d085c7eba483957d31ac338098521c76201c75b64f2120f84948b7f738fd19ede5005326bfe9a69bce0e2e27b0"], &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x10, 0x24, 0x20}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x6, 0x2, 0x3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x81, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7d, 0x6, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf, 0x8b, 0x7ff}]}, 0x3, [{0x12, &(0x7f0000000100)=@string={0x12, 0x3, "c1abf3e87b041ebfdcf392aa92a9944f"}}, {0x68, &(0x7f0000000140)=@string={0x68, 0x3, "159c2533db74771220674cc332c10ddd410ee977b3706d8ccf9d37c02747b2c9324236c802793b4b2a2ee3150377c1b6fdbdee9cb2181b98995c592fdc2086f81dad416c70f13db678d98f2d8c9fce0cc0c2ac2ad393a6acb2b704b1d662cae9da011716c621"}}, {0x58, &(0x7f00000001c0)=@string={0x58, 0x3, "789eeb3d22b14a860a129976214d682351d8fda56390e065b7b0e95213fcf02aa075733ad02b4b01594f1a08eb3a3b723ff1e2720376409c9c5523841f3d0da8618eb0b6cecf0f8f811a714d31e5999f5c9d8fe86296"}}]})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-write$char_usb-syz_usb_connect-syz_usb_connect-syz_usb_connect$printer
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x288, 0x91, 0x70, 0x19, 0x20, 0xb05, 0x18f1, 0xd7cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x5, 0x1, 0x30, 0x4f, [{{0x9, 0x4, 0x23, 0x9, 0x3, 0xff, 0xff, 0xff, 0x2, [], [{{0x9, 0x5, 0xa, 0x2, 0x8, 0x4, 0xb, 0x2}}, {{0x9, 0x5, 0x1, 0x2, 0x7df, 0x40, 0xf, 0x2}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0x7, 0x7}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0})
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xe0, 0x1, 0x4, 0x8, 0x3a8, 0x5732, 0x5e12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x4, 0x3, 0x4e, 0xfc, 0x55, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x4, 0x56, 0xca, 0xf6, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x10, 0x24, 0x20}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x6, 0x2, 0x3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x81, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7d, 0x6, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf, 0x8b, 0x7ff}]}, 0x3, [{0x12, &(0x7f0000000100)=@string={0x12, 0x3, "c1abf3e87b041ebfdcf392aa92a9944f"}}, {0x68, &(0x7f0000000140)=@string={0x68, 0x3, "159c2533db74771220674cc332c10ddd410ee977b3706d8ccf9d37c02747b2c9324236c802793b4b2a2ee3150377c1b6fdbdee9cb2181b98995c592fdc2086f81dad416c70f13db678d98f2d8c9fce0cc0c2ac2ad393a6acb2b704b1d662cae9da011716c621"}}, {0x58, &(0x7f00000001c0)=@string={0x58, 0x3, "789eeb3d22b14a860a129976214d682351d8fda56390e065b7b0e95213fcf02aa075733ad02b4b01594f1a08eb3a3b723ff1e2720376409c9c5523841f3d0da8618eb0b6cecf0f8f811a714d31e5999f5c9d8fe86296"}}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect-read$char_usb-read$char_usb-syz_usb_connect$hid-syz_usb_connect-syz_open_dev$char_usb
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x89, 0xab, 0xa, 0x40, 0x45e, 0x445, 0xdf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x87, 0x3b, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r0, &(0x7f0000000100)=""/74, 0x4a)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1aad, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff05408dabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501ee"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2700)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0x3, 0x4, "3b8830fc"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0xbc, 0xc4, 0x10, 0x4e6, 0x5, 0x1ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x8d, 0x2, 0x2, 0x62, 0x92, 0x18, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x0, 0x6, 0x28, "2534e06dd7b5b5689c9d2683c1f79f7cb0504fe0aa4d5e46f95df6e33320d598bcf98032f80d2d40"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="00310101"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0xe, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x6, 0x187, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0xc0, 0xba, 0x47, 0x10, 0x77d, 0x410, 0x496, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x175, 0x1, 0x0, 0x3, 0x80, 0xf6, [{{0x9, 0x4, 0xe6, 0x0, 0x3, 0x9a, 0xc, 0x4a, 0x14, [@generic={0x1b, 0x8, "d7b056a97e21ede18036f583d0d76d0342ac3e697d53d7c3bc"}], [{{0x9, 0x5, 0x2, 0x4, 0x200, 0x8, 0x1, 0x2, [@generic={0xdc, 0xa, "7fe2be0ef34d6853f61956dcbd64b29ddde732c528504ccee5caee55c8b04c419609ae352a2b7419bcae75a5fe4fc09ac49fd9e5b4e808ec5e235af3ad3be215b15470b2a8a3b201a4e4d140913a986fbdb8b2a6bfb8a0a91f1de7a5472a7ee5779dd60699876629e7ab8e77d4150650b2a20a7fa6d83c352d676e0c02874b9ed545c76c54cb37834b26760c9b0a0909c7989891f9407aa30f383094cb027ed674d89f7e7b368181de584e317a4e0c30833cad11a01d865171b8868e26eaafe332adc7683ec741de35afb0e31abe03c735845b2e32ceea0d312a"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0xcf, 0x8, 0xc}}, {{0x9, 0x5, 0x0, 0x18, 0x3ff, 0x10, 0x4, 0x3, [@generic={0x51, 0x5, "4ee3b148ec689329597d83259f908f5d8dbd0d42f655d60bb6af9b3ce055ecd3e510f51203e37d0abe6cadfe96a56917ec031a5d5ef4e0dfc436e1cadabfed419ce2cbe7a27debfa2ae4c49c5c5388"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
syz_usb_ep_write(r2, 0x9, 0x67, &(0x7f0000000140)="041ec4ae1d2f731c27f3594fb22f5e57b42ced59d6dc0899a36a2ea56ff81a44df6a74080abd4b76ddb6d07cb2756bbe4bb85655af4bf6ac6bddf16bae357b5702c34bca4cfbc6b0f140fde058298ddd04eda889d6e3e727d7946c70f8db3915eaf75f800cf8d2")

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_connect-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x84040)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xca, 0x0, 0x1, {0x22, 0xa0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc, 0x69, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x2e, 0xef, 0x6, 0x8, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x50}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}]})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0xe, 0x6, "19a0401c4f62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100), 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})
syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000006c0)={0x20, 0x140339add081b6e4, 0x5d, {0x5d, 0x8, "0a8fd386773cb91b966a6e0cf3c1a57718eda1df2b35076dfd25813fa3247171145dff619123697d550e243022b20832aba820950dd0cf997798fa35e297c0f929706adf6a53c613569ddad9b1c20e4cb26c4d4e71f7c604c8d81cd4489e3567e0af8d04f336555b1e3b2ffd975c10a416f447deef8e968c287bb238f772a1184186335378193e407d6d0eaa39424d68daf9429856c54a870becade1be790747b86fafa272163051d00802c415e61de20a49d04ac9852868717723"}}, &(0x7f0000000100)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "77dc3569aad0ea91938b92f2b47a57444ee090b6ade015f2bfe3f0bac0b9a294f9c57c113173d988f543ce756d39e3024b542d7ea004fb455eb73276262fa75b789c4dbdf5bf38c2697caa216d9eb9a08c6abe4067b4717c1ea379f86744984e88d0826603fd216f9b1251c7033e6b540edd8356042c2f09080419dba7009e8f2edf48be2bbebb557ea931ebc6150f3ab8f54234fe8330b3047a615165"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0xe5, "4794e5caa0f750aaf21f3e1f0194a433f3992988ab2c27dc7b1841a39334a12b9f38f05cac4958ff5e815142a638c16cb1b5de4c8fac273e63a3107b35779a57468665e6d3ac8463035a4811e17ccc1222c89542bb254ad2688c1f0f126943685c3ee94de08b5c3cbacceae9b9f35ee9035e63e89c268fd29038fa4a9f2e299e79e2fb5b6dced32e4915442c82ed3e4e858a1320eadbc70495262088d8cd69fb4d5fe96a96394875f19e8a82f9945458a483224736cec5a59f2a9556a963d3e78e723299317200a17422c9ce1aadfe6dcf145dfda70b23227d0b942ab96558b33bf1c7a673"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, "b35d"}, &(0x7f00000003c0)={0x20, 0x83, 0x0, 'Jo'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "891c73"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "1faf74"}})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x3d, 0x26, 0x20, 0xc45, 0x6288, 0x6b09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x29, 0x29}}]}}]}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=<r2=>r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYRES8=r1], 0x0, 0x0})

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="02005f461d2c98b24464109dc90f30db9306b2171effaaa787362cdca49b49bf7a4b371a18ec40ef42b29b94c35538d06454ce7cec26898c8a90361dfc4e0ff1778ee017e8babe588090ee8968c26319030a903e191946d7054a6a15d4295effeb74b2a7f415fbf5b2b370839abaf3b93ddac4d426a64a728339426971927127e407512ba532e3bd2e58f2c26f460bc36bf933db59a4214364999440e095b0022770a411cb66e71d3a1dec3769f4904857195ce270cabfdc97207bc1a095dc1c20590031e0406834fb0212f21bae87aea318cbd563dd49fc"], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0)

program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0)

program did not crash
testing program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m9.606698158s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
simplifying C reproducer
testing compiled C program (duration=2m9.606698158s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m9.606698158s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program did not crash
testing compiled C program (duration=2m9.606698158s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m9.606698158s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m9.606698158s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
testing compiled C program (duration=2m9.606698158s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep1
program crashed: KASAN: slab-use-after-free Read in v4l2_fh_init
reproducing took 1h20m41.501000357s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811d540730 by task v4l_id/3532

CPU: 0 UID: 0 PID: 3532 Comm: v4l_id Not tainted 6.13.0-rc7-syzkaller-g47a836da9ca9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x83/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x250/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x222/0x490 drivers/media/v4l2-core/v4l2-dev.c:429
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd70eb709a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007fff2e976900 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fff2e976b18 RCX: 00007fd70eb709a4
RDX: 0000000000000000 RSI: 00007fff2e976f25 RDI: 00000000ffffff9c
RBP: 00007fff2e976f25 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff2e976b30 R14: 00005597a4873670 R15: 00007fd70efbfa80
 </TASK>

Allocated by task 24:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 24:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:582
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x130/0x470 mm/slub.c:4761
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22a4/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

The buggy address belongs to the object at ffff88811d540000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1840 bytes inside of
 freed 8192-byte region [ffff88811d540000, ffff88811d542000)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d540
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
anon flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000
head: 0200000000000003 ffffea0004755001 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2961, tgid 2961 (kworker/1:3), ts 50709260374, free_ts 50200526923
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x21c/0x22a0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0xeb/0x400 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xd1d/0x16e0 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __kmalloc_cache_noprof+0x217/0x3e0 mm/slub.c:4324
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
page last free pid 2950 tgid 2950 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0xe40 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_node_noprof+0x150/0x3b0 mm/slub.c:4220
 alloc_task_struct_node kernel/fork.c:180 [inline]
 dup_task_struct kernel/fork.c:1108 [inline]
 copy_process+0x4be/0x8c00 kernel/fork.c:2224
 kernel_clone+0xfd/0x960 kernel/fork.c:2806
 __do_sys_clone+0xba/0x100 kernel/fork.c:2949
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811d540600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d540680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811d540700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88811d540780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d540800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff88811d540730 by task v4l_id/3532

CPU: 0 UID: 0 PID: 3532 Comm: v4l_id Not tainted 6.13.0-rc7-syzkaller-g47a836da9ca9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 v4l2_fh_init+0x27d/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x83/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x250/0x7e0 drivers/media/usb/em28xx/em28xx-video.c:2153
 v4l2_open+0x222/0x490 drivers/media/v4l2-core/v4l2-dev.c:429
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6cb/0x1390 fs/open.c:945
 vfs_open+0x82/0x3f0 fs/open.c:1075
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_openat fs/open.c:1433 [inline]
 __se_sys_openat fs/open.c:1428 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1428
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd70eb709a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007fff2e976900 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fff2e976b18 RCX: 00007fd70eb709a4
RDX: 0000000000000000 RSI: 00007fff2e976f25 RDI: 00000000ffffff9c
RBP: 00007fff2e976f25 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff2e976b30 R14: 00005597a4873670 R15: 00007fd70efbfa80
 </TASK>

Allocated by task 24:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 24:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:582
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x37/0x50 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4613 [inline]
 kfree+0x130/0x470 mm/slub.c:4761
 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2118 [inline]
 kref_put include/linux/kref.h:65 [inline]
 em28xx_v4l2_init+0x22a4/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2901
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

The buggy address belongs to the object at ffff88811d540000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 1840 bytes inside of
 freed 8192-byte region [ffff88811d540000, ffff88811d542000)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d540
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
anon flags: 0x200000000000040(head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000
head: 0200000000000040 ffff888100042280 0000000000000000 0000000000000001
head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000
head: 0200000000000003 ffffea0004755001 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2961, tgid 2961 (kworker/1:3), ts 50709260374, free_ts 50200526923
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xe76/0x2b90 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x21c/0x22a0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0xeb/0x400 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xd1d/0x16e0 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __kmalloc_cache_noprof+0x217/0x3e0 mm/slub.c:4324
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 em28xx_v4l2_init+0x114/0x4050 drivers/media/usb/em28xx/em28xx-video.c:2532
 em28xx_init_extension+0x137/0x200 drivers/media/usb/em28xx/em28xx-core.c:1117
 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
page last free pid 2950 tgid 2950 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0xe40 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_node_noprof+0x150/0x3b0 mm/slub.c:4220
 alloc_task_struct_node kernel/fork.c:180 [inline]
 dup_task_struct kernel/fork.c:1108 [inline]
 copy_process+0x4be/0x8c00 kernel/fork.c:2224
 kernel_clone+0xfd/0x960 kernel/fork.c:2806
 __do_sys_clone+0xba/0x100 kernel/fork.c:2949
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88811d540600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d540680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88811d540700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88811d540780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88811d540800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================