Extracting prog: 13m51.375078437s
Minimizing prog: 18m53.564792061s
Simplifying prog options: 0s
Extracting C: 1m19.253864423s
Simplifying C: 10m40.055982578s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x4, "24c8c8c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_connect$uac3-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$uac2-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-syz_open_dev$char_usb-write$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x4b47, 0x0)
r2 = syz_usb_connect(0x2, 0x51, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x21, 0xe1, 0xda, 0x20, 0x1404, 0xcddc, 0xbd2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x17, 0x5, 0xf0, 0x2, "", [{{0x9, 0x4, 0x46, 0x4, 0x3, 0xf2, 0x4, 0x23, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xa1}}], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x10, 0xf0, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x4, 0x6, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x75, 0xc7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52, 0x80}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0xd, 0x7, 0x20, 0x40, 0x5}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000a00)=@string={0x2}}]})
syz_usb_control_io$uac1(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000000100)={0x0, 0x7, 0x3d, {0x3d, 0x5, "e2a08b68fee05bce20f7ccdf17a07ea2923fd0cfa0868b5e0be77e08e80fde0462096d19c0dd880e265fc1b8feab112a320d2837812313e30dd0d4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000c00)={0x20, 0xa, 0x19, "1ad003173b0f25a8836017baabbf0f070cab4df2122ac19f8b"}, 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000d00)={0x20, 0x82, 0x3, "728477"}, &(0x7f0000000d40)={0x20, 0x83, 0x2, "cfec"}, 0x0, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "8bde1e"}})
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x3, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3d, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x401}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0)
r4 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a00810000000904010000010230000904010101"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000001c80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000001f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x5)
write$char_usb(r5, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_disconnect-syz_open_dev$char_usb-read$char_usb-read$char_usb-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r1)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="208402000b000000"], 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_connect$midi-syz_usb_connect-syz_open_dev$char_usb-syz_usb_ep_read-write$char_usb-write$char_usb-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0)
syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x9, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x100, 0x7}]}}}}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_read(r0, 0x5, 0x1000, &(0x7f00000002c0)=""/4096)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
write$char_usb(r1, &(0x7f0000000100)="565e1554d8", 0x5)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 15, 6, 16, 1, 15, 17, 16, 22, 26, 4, 14, 7, 20, 4, 16, 9, 29, 10, 18, 17, 20, 22, 11, 16, 8, 22, 20, 25, 4]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x40, 0x0, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1799, 0x78, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)
executing program 1:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0)
syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x9, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x100, 0x7}]}}}}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_read(r0, 0x5, 0x1000, &(0x7f00000002c0)=""/4096)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
write$char_usb(r1, &(0x7f0000000100)="565e1554d8", 0x5)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
executing program 3:
syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002e1f36a087205feca07440102030109022b000101099005090408070224d86c0509058000000408040609051103000200041c0705c15b"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x800)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001e40)=""/31)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b02, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x40, 0x6589d1dcc1ed157f, 0x4, "677afef2"}, 0x0, 0x0})
executing program 2:
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, 'G'}]}}, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/231)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
executing program 3:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0)
syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x9, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x100, 0x7}]}}}}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_read(r0, 0x5, 0x1000, &(0x7f00000002c0)=""/4096)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
write$char_usb(r1, &(0x7f0000000100)="565e1554d8", 0x5)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r1)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="208402000b000000"], 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000002340)=""/163)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000002680)=ANY=[@ANYBLOB="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"])
r2 = syz_open_dev$evdev(&(0x7f0000000600), 0xc, 0x10001)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001180)=""/212)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001300)={{0x3, 0x200, 0x10, 0x7, 0x5, 0x28000000}, 0xdd, [0xff, 0x7fff, 0x200, 0x7, 0x14f9, 0x7fffffff, 0xffff, 0x7, 0x36a, 0x7a, 0x2, 0x6, 0x7, 0x97, 0xffffffff, 0x5, 0x1, 0x4, 0x7ff, 0x0, 0x2, 0xfffffffc, 0xfffffffb, 0xfffffffe, 0x9, 0x6, 0x9705, 0x48, 0x5, 0x9, 0x495, 0x2d, 0x0, 0x0, 0x3, 0x28dd, 0x6, 0xac9, 0x3e6, 0x4, 0xcc80, 0xddcd, 0x3, 0x2, 0x6, 0x2, 0x8, 0x7, 0x401, 0x60000, 0xfffffbff, 0x1, 0x4, 0x7, 0x8000, 0x38, 0x5, 0x7, 0x7ff, 0x8, 0x8000, 0x7, 0x8, 0x7857, 0x4, 0xf, 0x7fffffff, 0x4, 0x2, 0x1ff, 0x7, 0x5, 0x5, 0xf8, 0x2, 0x4, 0x8, 0x8, 0x7, 0x6, 0x152, 0x1, 0x7, 0x9, 0x9, 0x7, 0x0, 0x10000, 0x1, 0x8001, 0xfffffffb, 0x7, 0x7, 0x2, 0x7, 0x6, 0xfffffc00, 0x2, 0x7, 0x6df8, 0xff, 0x3, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x669f, 0xd13, 0x1, 0x2, 0x1e50, 0xeb, 0x400, 0x6, 0x9, 0x3, 0x5, 0x9, 0x1, 0x6, 0x80000001, 0x1, 0x3, 0x7fff, 0x8, 0xb51, 0x0, 0x5, 0x9, 0x10000, 0x7ff, 0x4, 0x3, 0x4, 0x0, 0x3, 0x7, 0xff0000, 0x2, 0x10000, 0x2d0, 0x2, 0x1, 0x6, 0x7fff80, 0x0, 0x1, 0x200, 0xffff9fa2, 0x0, 0xe, 0xfff, 0x7ff, 0xff, 0x4, 0x200, 0x401, 0x6, 0x6, 0x7, 0x5, 0xfffffff4, 0x0, 0xfffffffe, 0x2, 0x6, 0x0, 0xa1a, 0xfffff831, 0x2, 0xfd, 0x6, 0xfffffff0, 0x5, 0x4, 0x7, 0x3, 0x8, 0x1, 0x6, 0xff, 0x5, 0x2, 0x1ff, 0x8, 0x1, 0x35e, 0x7, 0x1, 0x6, 0x4d, 0xff, 0x1, 0x4, 0xffff, 0x4, 0x1, 0xc417, 0x8, 0xc, 0x2, 0x9, 0x3, 0x1000, 0xeca0, 0x7, 0x4, 0x400, 0x4, 0xf3, 0xffffffff, 0x2, 0x100, 0x48000000, 0x408, 0xe, 0x3, 0x0, 0x5, 0xffffff14, 0x92, 0x10, 0x1, 0x100, 0x4, 0x1e1, 0x8, 0xbe, 0x6, 0x5, 0x100, 0xdc, 0x401, 0xea, 0x401, 0x8, 0x3, 0xd9dc, 0x9, 0xffffffff, 0x0, 0x6, 0xc762, 0x1, 0x5, 0x4, 0x1, 0x3, 0x7, 0x8, 0x3, 0xfffffffa, 0x0, 0xd, 0x3, 0x3, 0x3, 0x4, 0x5695, 0x5, 0x9, 0x8000, 0x7, 0x5, 0x5, 0x2, 0x0, 0x8, 0x5, 0x4, 0x4, 0x4, 0x7, 0x3, 0x8, 0x81, 0x2, 0x81, 0x2, 0x10, 0x5, 0x7ff, 0x4, 0x26a, 0x7e9, 0x4, 0x51, 0x7ff, 0x8, 0x80000000, 0x7fffffff, 0x5, 0x7, 0x8, 0x1, 0x4, 0x7, 0x3, 0x1, 0x10, 0x400, 0x6, 0xfffffff6, 0x2, 0xd365, 0x1ff, 0x101, 0xa, 0x5, 0x44, 0x10000, 0x10, 0x6, 0x1, 0x376, 0x1ff, 0x1, 0x9, 0x9, 0x4, 0xfffffffc, 0x8, 0x0, 0x1, 0x2, 0x100, 0x7, 0xaa0, 0xf76, 0x5, 0x3, 0x31c, 0x5432, 0x4, 0x5, 0x7, 0x100, 0x400, 0x2, 0x9, 0x8, 0x9, 0x9, 0x2, 0x6, 0x9, 0x100, 0x101, 0xd87, 0xffffffc0, 0x9, 0x26e, 0xe4bc, 0x80000001, 0x800, 0x3, 0xb, 0x8001, 0x8, 0x7, 0x4, 0x9, 0x0, 0x1000, 0x2, 0x2, 0x8e4, 0x80, 0xffffffff, 0xfe50, 0x2, 0x2, 0x5, 0x5, 0xf, 0xda0, 0xf264, 0x8, 0x10, 0x8, 0xd26, 0x9, 0x9, 0x4, 0x4, 0x6, 0x6f3c, 0x40, 0x7fffffff, 0x0, 0x1, 0x318e94c9, 0x8, 0x4, 0x2, 0xfffff00d, 0x7fffffff, 0x3, 0x100, 0x1, 0x1000, 0x6, 0x5c, 0x2, 0x2, 0x10001, 0x4, 0x5, 0x1, 0x7c0, 0x2, 0xe, 0x0, 0x6, 0xeb, 0x3, 0x9, 0x5, 0x2, 0x3ff, 0x6, 0x7, 0x8d, 0x4, 0x9f9, 0xfffffffe, 0x9, 0xfffffff9, 0x0, 0x0, 0x78d8, 0x2000, 0x0, 0xffffffff, 0x80000000, 0x4, 0x1, 0x7, 0x1, 0x88, 0x4, 0x6, 0x6, 0x5, 0x7, 0x0, 0x7, 0xb, 0x2, 0x51fe, 0xf, 0x800, 0x0, 0x4fe6, 0x9, 0x3ff, 0x0, 0x9, 0x0, 0x3, 0x8f3, 0xfffffffa, 0x7, 0x9, 0x6, 0x11d, 0x0, 0xa, 0x8, 0x8, 0x6, 0x9, 0x0, 0x12, 0x1, 0xd, 0x5, 0x4, 0x0, 0x6, 0x899, 0x1fc0, 0x6fa, 0x7, 0x0, 0x2, 0x8, 0x401, 0x7, 0x0, 0x1, 0x10001, 0x1, 0x7fffffff, 0x3ff, 0xb, 0x0, 0x5, 0xffffffff, 0xfff, 0x401, 0xfff, 0x8, 0x7d, 0x200, 0x80000000, 0x7, 0x7, 0x1, 0xe11, 0x400, 0x3, 0x5, 0x3, 0x10001, 0xfffffffc, 0x9, 0x18000000, 0x5, 0x4, 0x3ff, 0x7, 0xca, 0x65, 0x0, 0x80, 0xfffffffc, 0xe, 0x8, 0x9, 0x4, 0x8, 0xdcbf, 0x2, 0x6, 0x2, 0x2, 0x6, 0xc, 0x0, 0x4, 0x40, 0x9, 0x4, 0x9, 0x800, 0x0, 0x9, 0x2, 0x80000001, 0x7, 0x80000001, 0x79b, 0x5, 0xc, 0x4, 0xd5, 0x9, 0xe, 0x3ff, 0x400, 0x401, 0xe689, 0x1000, 0x0, 0x6, 0x3, 0x3, 0x2, 0x2, 0x4, 0x9, 0x80, 0x3, 0x5, 0x8001, 0x7, 0x3, 0x2, 0x7, 0xfffffff7, 0xc, 0xffffffff, 0x28, 0x0, 0x2, 0x1, 0xc, 0x5b6, 0xee9, 0x73e, 0xfffffffb, 0x6, 0x1c, 0x8, 0x7, 0x8, 0x80000000, 0x6, 0x2, 0x9, 0x1, 0x8000, 0x3ff, 0x7b18, 0x61, 0xfffffffc, 0x0, 0x5, 0x8, 0x53e6, 0xfffffffd, 0x3, 0x6, 0x3, 0x7fffffff, 0x6, 0x81, 0x7f, 0x4, 0xd34, 0x80, 0xffffffff, 0x8, 0x3, 0x88, 0x1, 0x1ff, 0xfff, 0x7c5, 0x9, 0x6, 0x10, 0x5, 0xe2, 0xa8, 0x44, 0x6, 0x7f, 0x0, 0x3, 0x0, 0xa8, 0x6, 0x5, 0x5, 0x3, 0xe21, 0xff, 0x1, 0x2, 0x5, 0x2d, 0x5, 0xff, 0x3, 0x3, 0x8001, 0x100, 0x7, 0x10000, 0x2, 0x7, 0x54, 0x4, 0xce, 0x5, 0x88000000, 0x1, 0x2, 0x8, 0xffff, 0x96000000, 0x6, 0x2, 0xd26, 0x1, 0x9, 0x10001, 0x2, 0xc1a, 0x1ff, 0x4, 0xfff, 0x10001, 0xb6, 0x5, 0xa, 0x3, 0xfffffffd, 0x4, 0x50e, 0x3, 0x2, 0x9, 0x2, 0x0, 0x54, 0x9, 0x50, 0xe, 0x8, 0x9, 0xfffffff9, 0x1ff, 0x4, 0xff, 0x8beb, 0x5, 0x0, 0xffff, 0x7, 0x80000000, 0xd36, 0x2, 0xffffde70, 0x5, 0x9, 0x1, 0x8000, 0x4, 0x5, 0xd, 0x81, 0x10001, 0x4, 0x7f, 0x1, 0x4, 0x9, 0xdd9b, 0x7, 0x4, 0xffffffff, 0x7, 0xb73, 0xa0, 0x6, 0x7, 0xff, 0x2, 0x1ff, 0xff, 0x401, 0x7, 0x5, 0x3, 0x400, 0x1, 0x2, 0x100, 0x1, 0x1, 0x4, 0xb746, 0x8, 0x317, 0xc2fd, 0x97, 0x2, 0x1000, 0x6, 0x6, 0x7, 0x81, 0x4, 0x7, 0xfffffff7, 0x4, 0x10000, 0x3ff, 0xefc0, 0x1, 0x6, 0x5c4, 0x1, 0x17c, 0x7f, 0x0, 0x0, 0xfffff801, 0x73f5, 0x9, 0x1b20, 0x2ae, 0x9, 0x9, 0x3aa7, 0x3d, 0x2, 0x200, 0x1, 0x7, 0x1, 0x3b6000, 0x8, 0x8, 0x9, 0x400, 0x2, 0xfffffffd, 0x9, 0x3, 0x3, 0x1, 0x4, 0x9ae, 0x1c5, 0x3, 0x9fc, 0x401, 0xfffffffc, 0x8, 0x1, 0x553, 0x822, 0x0, 0x200, 0xec, 0x2, 0xe, 0x2099, 0x7, 0x3, 0x4, 0xffff, 0x856, 0x2, 0x469e, 0xffff, 0x6, 0x1, 0x7ff, 0x3, 0x0, 0x1, 0xff, 0x6, 0x80000000, 0x6, 0xfffff000, 0x8, 0x2, 0x3, 0x8, 0x469, 0x3ff, 0x3, 0xb, 0x3bf3, 0x0, 0x8, 0x502, 0x8000, 0x2, 0xdc6, 0x9, 0x0, 0x9, 0x0, 0x800, 0x7, 0x3fdb773, 0x4, 0x6, 0xfff, 0x5, 0x19723e54, 0x8001, 0x3, 0xfffffc00, 0xffffffff, 0xfffffffa, 0xc2, 0x3, 0x7, 0x4, 0xff, 0x5, 0x9, 0x6, 0xfd1e, 0x90, 0x8, 0x0, 0x5, 0x8, 0x7b89a1c, 0xefc8, 0x80, 0x0, 0x1000, 0x7ff, 0x9, 0xe, 0x9, 0x9, 0x10, 0x5e0, 0x4, 0xf40, 0x80000000, 0x18000, 0x2, 0x941, 0x9, 0x1, 0x4, 0x7, 0x1ff, 0x8, 0x5, 0x4, 0x2ed8, 0x7, 0x9, 0x4, 0x6, 0x10, 0xe, 0xffffff3a, 0x6, 0x5, 0x6, 0x8, 0x1, 0x9, 0xfff, 0x8, 0x8001, 0x4, 0x7, 0x80000000, 0x7, 0xb615, 0x7, 0x2, 0x9, 0x1, 0x0, 0xffff, 0x8, 0x7fff, 0x6, 0x55, 0x5, 0xc, 0x5, 0x1, 0x6, 0x5, 0x3, 0xb60, 0x8, 0x1ff, 0x9, 0x4a, 0x1d, 0x5, 0x2, 0x8, 0x2, 0x4, 0x7f4, 0x7, 0x3, 0x8, 0xd82, 0x0, 0x7cf0, 0x8, 0x0, 0x9, 0x7ff, 0x14, 0x1, 0x30, 0x1ff, 0x4, 0x1, 0xed79, 0x5, 0x6, 0x5, 0xbde, 0x400, 0x1, 0xe3c, 0x8000, 0x401, 0x10000, 0x4, 0x6, 0x200, 0x3, 0x0, 0x9, 0x5f, 0x1, 0xfffff800, 0x2, 0x7, 0xffff, 0x11c, 0x9, 0x8, 0xfffffdb1, 0x6, 0x2, 0xd9, 0x401, 0xfffffffa, 0x80000001, 0x5, 0xfffffffe, 0x5190, 0xff, 0xe, 0x1, 0x3, 0x6, 0xa16, 0x2e51]})
syz_usb_ep_read(0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001280))
r3 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000300)=ANY=[], 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000101008020000000000000109022400010000000009040000090300030009210800030122290009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403", @ANYRES64=0x0]}, 0x0)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0xafa0)
syz_usb_connect$rtl8150(0x2, 0x0, 0x0, 0x0)
syz_usb_ep_read(r3, 0x9a, 0x54, &(0x7f0000000580)=""/84)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000044c0)=ANY=[@ANYBLOB="12010102eb8dfc40392a8c3f18ab0002030109021200010d0610020904000400"], 0x0)
syz_usb_connect$cdc_ecm(0x4, 0xe2, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001020000102505a1a44000010203010902d000010106d00809040009030206000007240600002bf105240003000d240f01a3000000000080001d7d24137feb16942fff245324b719dfe65c9d9883faced867354a457fceee223fec41a648d3a9c9c34783940f50df5738fec175aa608858bd2159dfa94b278629e34a688168da4097045a87b50e7ff2ed9447f0480df107feac054fbb00c6a8913a5712e7c5ab1f02d5a333921bc4f8ef70fd6a3496aff9affb1f34369a08241cd53af7cd46e807030005241506000905810300040a0100090582020004810f0b09050302ff0308be09"], &(0x7f0000000e40)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x200, 0x8, 0x1, 0x0, 0x20}, 0x49, &(0x7f0000000cc0)={0x5, 0xf, 0x49, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0xf6, 0x2f2}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "26f1473274c32cc8dff5ac74b0a60010"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x0, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x8, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a095f643ebdcc2bf5e78f8ad712cbafc"}]}, 0x3, [{0x1b, &(0x7f0000000d40)=@string={0x1b, 0x3, "b5206c8916a0c969bfb9f0fdc83886cb0aa2e46b525adc0238"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x80c}}, {0x1f, &(0x7f0000000e00)=@string={0x1f, 0x3, "52fdd744bb3daa8970ab6dca2225fdc3c009099def98012ce3a82a6380"}}]})
syz_usb_connect$cdc_ncm(0x1, 0x130, &(0x7f0000000640)={{0x12, 0x1, 0x3d0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11e, 0x2, 0x1, 0x80, 0x40, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a2ae3c4b"}, {0x5, 0x24, 0x0, 0x67}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0xa9e, 0x52}, {0x6, 0x24, 0x1a, 0x7f, 0x28}, [@mdlm_detail={0xb4, 0x24, 0x13, 0x4, "ee69a24d0262bb81a4722b377b854e084ac7cebd1271b487fe2e8bfce02603c953800339dfea49ce9f0765e48e5a3635a27f055da4442cce06ec4510f3ec3d6aa88816da6003833335fdf4da841646d2ae38b5493b541e3a197f18b685bb103b3b57818250f534624b7a4bb0233d5550f54d8eb5e785f2c83cc34adfe5dfbbadd53cfadc22112a82a291eaa09cc01cbaf510974775f67b4cb88d82daa33d189a9af92f3b68b0c6170cace08be9d3a075"}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0xf2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x80, 0x7}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x10, 0xb, 0x3, 0x20, 0xf9}, 0x1c, &(0x7f00000007c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "ada9d0b5e7d77f750414c7fcc4821c45"}]}, 0x4, [{0xf4, &(0x7f0000002540)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41b}}]})
syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x40, 0x20, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '=2='}, {0x5, 0x24, 0x0, 0xff01}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x400, 0x6, 0x5f}, {0x6, 0x24, 0x1a, 0x2, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x5, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x38, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x7b, 0xdb}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
syz_usb_connect(0x2, 0x396, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023ee6f410b40402101b60010203010902840301090130d30904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[], 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000002b00)={0x44, &(0x7f0000002880)={0x0, 0x18, 0x1, "d8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000002dc0)={0x44, &(0x7f0000002b80)={0x40, 0x1, 0x6, "dcf5ecc3cb8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$printer(0x1f, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d801"], 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba)
write$char_usb(r3, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[], 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
read$hidraw(r5, 0x0, 0x49)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8e2b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x1068)
syz_usb_control_io$hid(r1, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
executing program 1:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0)
syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x9, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x100, 0x7}]}}}}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_read(r0, 0x5, 0x1000, &(0x7f00000002c0)=""/4096)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
write$char_usb(r1, &(0x7f0000000100)="565e1554d8", 0x5)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
executing program 4:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000000580)="37ef", 0x2)
write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1)
syz_usb_disconnect(r0)
executing program 2:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0014010000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000140)={0x40, 0xe}, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000280)='L', 0x1)
syz_open_dev$hiddev(&(0x7f0000000080), 0xffffffff, 0x204)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000040)=0x7)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0xbe, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2f7cdb48d028b6bb07fde67fbfe2840299d6d55f383bd8b93022790a915db30550abf59c7ecab7bae554898c4e95dab00b3"}, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000080)="0041c3")
executing program 4:
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, 'G'}]}}, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
r5 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/231)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
executing program 3:
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd00000000109021200"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beae"], 0x0)
r6 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/231)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0xc0, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2f7cdb48d028b6bb07fde67fbfe2840299d6d55f383bd8b93022790a915db30550abf59c7ecab7bae554898c4e95dab00b36d09"}, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000080)="0041c3c4924c9b")
executing program 0:
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, 'G'}]}}, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x80000000002, 0x30004)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000040)=0x7)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0xc1, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2f7cdb48d028b6bb07fde67fbfe2840299d6d55f383bd8b93022790a915db30550abf59c7ecab7bae554898c4e95dab00b36d09d0"}, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x6, &(0x7f0000000080)="0041c3c4924c")
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100031bf5f708b4070a0102a378f31a010902120001000b80050904af09000806"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x5}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 4:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0)
syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x9, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x100, 0x7}]}}}}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_read(r0, 0x5, 0x1000, &(0x7f00000002c0)=""/4096)
write$char_usb(r1, &(0x7f0000000080)='7', 0x1)
write$char_usb(r1, &(0x7f0000000100)="565e1554d8", 0x5)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r1)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="208402000b000000"], 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
executing program 0:
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd00000000109021200"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beae"], 0x0)
r6 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/231)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0xc0, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2f7cdb48d028b6bb07fde67fbfe2840299d6d55f383bd8b93022790a915db30550abf59c7ecab7bae554898c4e95dab00b36d09"}, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000080)="0041c3c4924c9b")
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x4b47, 0x0)
r2 = syz_usb_connect(0x2, 0x51, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x21, 0xe1, 0xda, 0x20, 0x1404, 0xcddc, 0xbd2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x17, 0x5, 0xf0, 0x2, "", [{{0x9, 0x4, 0x46, 0x4, 0x3, 0xf2, 0x4, 0x23, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xa1}}], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x10, 0xf0, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x4, 0x6, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x75, 0xc7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52, 0x80}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0xd, 0x7, 0x20, 0x40, 0x5}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000a00)=@string={0x2}}]})
syz_usb_control_io$uac1(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000000100)={0x0, 0x7, 0x3d, {0x3d, 0x5, "e2a08b68fee05bce20f7ccdf17a07ea2923fd0cfa0868b5e0be77e08e80fde0462096d19c0dd880e265fc1b8feab112a320d2837812313e30dd0d4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000c00)={0x20, 0xa, 0x19, "1ad003173b0f25a8836017baabbf0f070cab4df2122ac19f8b"}, 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000d00)={0x20, 0x82, 0x3, "728477"}, &(0x7f0000000d40)={0x20, 0x83, 0x2, "cfec"}, 0x0, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "8bde1e"}})
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x3, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3d, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x401}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0)
r4 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a00810000000904010000010230000904010101"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000001c80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000001f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x5)
write$char_usb(r5, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x4, "24c8c8c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x4, "24c8c8c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_connect$uac3-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$uac2-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-syz_open_dev$char_usb-write$char_usb
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x4b47, 0x0)
r2 = syz_usb_connect(0x2, 0x51, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x21, 0xe1, 0xda, 0x20, 0x1404, 0xcddc, 0xbd2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x17, 0x5, 0xf0, 0x2, "", [{{0x9, 0x4, 0x46, 0x4, 0x3, 0xf2, 0x4, 0x23, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xa1}}], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x10, 0xf0, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x4, 0x6, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x75, 0xc7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52, 0x80}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0xd, 0x7, 0x20, 0x40, 0x5}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000a00)=@string={0x2}}]})
syz_usb_control_io$uac1(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000000100)={0x0, 0x7, 0x3d, {0x3d, 0x5, "e2a08b68fee05bce20f7ccdf17a07ea2923fd0cfa0868b5e0be77e08e80fde0462096d19c0dd880e265fc1b8feab112a320d2837812313e30dd0d4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000c00)={0x20, 0xa, 0x19, "1ad003173b0f25a8836017baabbf0f070cab4df2122ac19f8b"}, 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000d00)={0x20, 0x82, 0x3, "728477"}, &(0x7f0000000d40)={0x20, 0x83, 0x2, "cfec"}, 0x0, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "8bde1e"}})
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x3, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3d, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x401}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0)
r4 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a00810000000904010000010230000904010101"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000001c80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000001f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x5)
write$char_usb(r5, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$hid-syz_usb_disconnect-syz_open_dev$char_usb-read$char_usb-read$char_usb-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_disconnect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r1)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="208402000b000000"], 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)

program crashed: general protection fault in uea_upload_pre_firmware
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)

program crashed: general protection fault in uea_upload_pre_firmware
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)

program crashed: general protection fault in uea_upload_pre_firmware
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)

program crashed: general protection fault in uea_upload_pre_firmware
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m59.93705713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
simplifying C reproducer
testing compiled C program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing compiled C program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing compiled C program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing compiled C program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing compiled C program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing compiled C program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
testing program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
validation run: crashed=true
testing program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
validation run: crashed=true
testing program (duration=1m59.93705713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

program crashed: KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
validation run: crashed=true
reproducing took 49m31.450140938s
repro crashed as (corrupted=false):
usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
usb 4-1: USB disconnect, device number 2
==================================================================
BUG: KASAN: slab-out-of-bounds in __mutex_lock_common kernel/locking/mutex.c:625 [inline]
BUG: KASAN: slab-out-of-bounds in __mutex_lock+0x15ca/0x1bd0 kernel/locking/mutex.c:821
Read of size 8 at addr ffff888105ea6760 by task kworker/1:0/23

CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 __mutex_lock_common kernel/locking/mutex.c:625 [inline]
 __mutex_lock+0x15ca/0x1bd0 kernel/locking/mutex.c:821
 usbatm_usb_disconnect+0x70/0x7e0 drivers/usb/atm/usbatm.c:1221
 uea_disconnect+0x279/0x2b0 drivers/usb/atm/ueagle-atm.c:2605
 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:618 [inline]
 device_remove+0x12a/0x180 drivers/base/dd.c:610
 __device_release_driver drivers/base/dd.c:1349 [inline]
 device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372
 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:664
 device_del+0x376/0x9b0 drivers/base/core.c:3961
 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1478
 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2345
 hub_port_connect drivers/usb/core/hub.c:5407 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x1d0c/0x4af0 drivers/usb/core/hub.c:5953
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 1:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x35e/0x670 mm/slub.c:5515
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 class_dir_create_and_add drivers/base/core.c:3291 [inline]
 get_device_parent+0x29a/0x4c0 drivers/base/core.c:3351
 device_add+0x1ad/0x1970 drivers/base/core.c:3681
 wakeup_source_device_create+0x243/0x2e0 drivers/base/power/wakeup_stats.c:163
 wakeup_source_sysfs_add+0x1c/0x90 drivers/base/power/wakeup_stats.c:183
 wakeup_source_register+0x154/0x3e0 drivers/base/power/wakeup.c:218
 acpi_add_pm_notifier+0x123/0x270 drivers/acpi/device_pm.c:589
 pci_acpi_add_pm_notifier drivers/pci/pci-acpi.c:891 [inline]
 pci_acpi_setup+0x268/0x6e0 drivers/pci/pci-acpi.c:1441
 acpi_device_notify+0x283/0x500 drivers/acpi/glue.c:381
 device_platform_notify drivers/base/core.c:2443 [inline]
 device_add+0x2b4/0x1970 drivers/base/core.c:3702
 pci_device_add+0xaef/0x1570 drivers/pci/probe.c:2767
 pci_scan_single_device drivers/pci/probe.c:2792 [inline]
 pci_scan_single_device+0x1d0/0x240 drivers/pci/probe.c:2778
 pci_scan_slot+0x1c9/0x7c0 drivers/pci/probe.c:2875
 pci_scan_child_bus_extend+0x6b/0x7a0 drivers/pci/probe.c:3094
 acpi_pci_root_create+0x6d6/0x8c0 drivers/acpi/pci_root.c:1048
 pci_acpi_scan_root+0x4ae/0x5c0 arch/x86/pci/acpi.c:574
 acpi_pci_root_add.cold+0x81a/0x15cc drivers/acpi/pci_root.c:723
 acpi_scan_attach_handler drivers/acpi/scan.c:2325 [inline]
 acpi_bus_attach+0x63d/0xbc0 drivers/acpi/scan.c:2374
 acpi_dev_for_one_check drivers/acpi/bus.c:1278 [inline]
 acpi_dev_for_one_check+0x97/0xd0 drivers/acpi/bus.c:1271
 device_for_each_child+0x11e/0x1a0 drivers/base/core.c:4101
 acpi_dev_for_each_child+0x88/0xc0 drivers/acpi/bus.c:1290
 acpi_bus_attach+0x91d/0xbc0 drivers/acpi/scan.c:2395
 acpi_dev_for_one_check drivers/acpi/bus.c:1278 [inline]
 acpi_dev_for_one_check+0x97/0xd0 drivers/acpi/bus.c:1271
 device_for_each_child+0x11e/0x1a0 drivers/base/core.c:4101
 acpi_dev_for_each_child+0x88/0xc0 drivers/acpi/bus.c:1290
 acpi_bus_attach+0x91d/0xbc0 drivers/acpi/scan.c:2395
 acpi_bus_scan+0xdc/0x4a0 drivers/acpi/scan.c:2745
 acpi_scan_init+0x2fb/0x520 drivers/acpi/scan.c:2871
 acpi_init+0x78f/0x840 drivers/acpi/bus.c:1605
 do_one_initcall+0x11d/0x700 init/main.c:1347
 do_initcall_level init/main.c:1409 [inline]
 do_initcalls init/main.c:1425 [inline]
 do_basic_setup init/main.c:1445 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1658
 kernel_init+0x1f/0x1e0 init/main.c:1548
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888105ea6700
 which belongs to the cache kmalloc-96 of size 96
The buggy address is located 24 bytes to the right of
 allocated 72-byte region [ffff888105ea6700, ffff888105ea6748)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105ea6
flags: 0x200000000000000(node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000000 ffff888100041280 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3812127155, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1859
 prep_new_page mm/page_alloc.c:1867 [inline]
 get_page_from_freelist+0xf25/0x3400 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x28f/0x2b90 mm/page_alloc.c:5304
 alloc_slab_page mm/slub.c:3294 [inline]
 allocate_slab mm/slub.c:3408 [inline]
 new_slab+0xa2/0x670 mm/slub.c:3454
 refill_objects+0xe3/0x410 mm/slub.c:7338
 refill_sheaf mm/slub.c:2832 [inline]
 __pcs_replace_empty_main+0x376/0x680 mm/slub.c:4703
 alloc_from_pcs mm/slub.c:4801 [inline]
 slab_alloc_node mm/slub.c:4933 [inline]
 __kmalloc_cache_noprof+0x50e/0x670 mm/slub.c:5511
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 acpi_evaluate_object+0xf5/0xe00 drivers/acpi/acpica/nsxfeval.c:177
 acpi_evaluate_dsm+0x19c/0x290 drivers/acpi/utils.c:797
 acpi_check_dsm+0x66/0x260 drivers/acpi/utils.c:830
 device_has_acpi_name drivers/pci/pci-label.c:44 [inline]
 smbios_attr_is_visible+0xac/0x1c0 drivers/pci/pci-label.c:121
 create_files fs/sysfs/group.c:69 [inline]
 internal_create_group+0x51f/0xfb0 fs/sysfs/group.c:189
 internal_create_groups+0x9d/0x150 fs/sysfs/group.c:229
 bus_add_device+0x109/0x6c0 drivers/base/bus.c:573
 device_add+0x9d4/0x1970 drivers/base/core.c:3714
 pci_device_add+0xaef/0x1570 drivers/pci/probe.c:2767
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888105ea6600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff888105ea6680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
>ffff888105ea6700: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
                                                       ^
 ffff888105ea6780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff888105ea6800: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
==================================================================

final repro crashed as (corrupted=false):
usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
usb 4-1: USB disconnect, device number 2
==================================================================
BUG: KASAN: slab-out-of-bounds in __mutex_lock_common kernel/locking/mutex.c:625 [inline]
BUG: KASAN: slab-out-of-bounds in __mutex_lock+0x15ca/0x1bd0 kernel/locking/mutex.c:821
Read of size 8 at addr ffff888105ea6760 by task kworker/1:0/23

CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 __mutex_lock_common kernel/locking/mutex.c:625 [inline]
 __mutex_lock+0x15ca/0x1bd0 kernel/locking/mutex.c:821
 usbatm_usb_disconnect+0x70/0x7e0 drivers/usb/atm/usbatm.c:1221
 uea_disconnect+0x279/0x2b0 drivers/usb/atm/ueagle-atm.c:2605
 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:618 [inline]
 device_remove+0x12a/0x180 drivers/base/dd.c:610
 __device_release_driver drivers/base/dd.c:1349 [inline]
 device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372
 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:664
 device_del+0x376/0x9b0 drivers/base/core.c:3961
 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1478
 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2345
 hub_port_connect drivers/usb/core/hub.c:5407 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x1d0c/0x4af0 drivers/usb/core/hub.c:5953
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 1:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x35e/0x670 mm/slub.c:5515
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 class_dir_create_and_add drivers/base/core.c:3291 [inline]
 get_device_parent+0x29a/0x4c0 drivers/base/core.c:3351
 device_add+0x1ad/0x1970 drivers/base/core.c:3681
 wakeup_source_device_create+0x243/0x2e0 drivers/base/power/wakeup_stats.c:163
 wakeup_source_sysfs_add+0x1c/0x90 drivers/base/power/wakeup_stats.c:183
 wakeup_source_register+0x154/0x3e0 drivers/base/power/wakeup.c:218
 acpi_add_pm_notifier+0x123/0x270 drivers/acpi/device_pm.c:589
 pci_acpi_add_pm_notifier drivers/pci/pci-acpi.c:891 [inline]
 pci_acpi_setup+0x268/0x6e0 drivers/pci/pci-acpi.c:1441
 acpi_device_notify+0x283/0x500 drivers/acpi/glue.c:381
 device_platform_notify drivers/base/core.c:2443 [inline]
 device_add+0x2b4/0x1970 drivers/base/core.c:3702
 pci_device_add+0xaef/0x1570 drivers/pci/probe.c:2767
 pci_scan_single_device drivers/pci/probe.c:2792 [inline]
 pci_scan_single_device+0x1d0/0x240 drivers/pci/probe.c:2778
 pci_scan_slot+0x1c9/0x7c0 drivers/pci/probe.c:2875
 pci_scan_child_bus_extend+0x6b/0x7a0 drivers/pci/probe.c:3094
 acpi_pci_root_create+0x6d6/0x8c0 drivers/acpi/pci_root.c:1048
 pci_acpi_scan_root+0x4ae/0x5c0 arch/x86/pci/acpi.c:574
 acpi_pci_root_add.cold+0x81a/0x15cc drivers/acpi/pci_root.c:723
 acpi_scan_attach_handler drivers/acpi/scan.c:2325 [inline]
 acpi_bus_attach+0x63d/0xbc0 drivers/acpi/scan.c:2374
 acpi_dev_for_one_check drivers/acpi/bus.c:1278 [inline]
 acpi_dev_for_one_check+0x97/0xd0 drivers/acpi/bus.c:1271
 device_for_each_child+0x11e/0x1a0 drivers/base/core.c:4101
 acpi_dev_for_each_child+0x88/0xc0 drivers/acpi/bus.c:1290
 acpi_bus_attach+0x91d/0xbc0 drivers/acpi/scan.c:2395
 acpi_dev_for_one_check drivers/acpi/bus.c:1278 [inline]
 acpi_dev_for_one_check+0x97/0xd0 drivers/acpi/bus.c:1271
 device_for_each_child+0x11e/0x1a0 drivers/base/core.c:4101
 acpi_dev_for_each_child+0x88/0xc0 drivers/acpi/bus.c:1290
 acpi_bus_attach+0x91d/0xbc0 drivers/acpi/scan.c:2395
 acpi_bus_scan+0xdc/0x4a0 drivers/acpi/scan.c:2745
 acpi_scan_init+0x2fb/0x520 drivers/acpi/scan.c:2871
 acpi_init+0x78f/0x840 drivers/acpi/bus.c:1605
 do_one_initcall+0x11d/0x700 init/main.c:1347
 do_initcall_level init/main.c:1409 [inline]
 do_initcalls init/main.c:1425 [inline]
 do_basic_setup init/main.c:1445 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1658
 kernel_init+0x1f/0x1e0 init/main.c:1548
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888105ea6700
 which belongs to the cache kmalloc-96 of size 96
The buggy address is located 24 bytes to the right of
 allocated 72-byte region [ffff888105ea6700, ffff888105ea6748)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105ea6
flags: 0x200000000000000(node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000000 ffff888100041280 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3812127155, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1859
 prep_new_page mm/page_alloc.c:1867 [inline]
 get_page_from_freelist+0xf25/0x3400 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x28f/0x2b90 mm/page_alloc.c:5304
 alloc_slab_page mm/slub.c:3294 [inline]
 allocate_slab mm/slub.c:3408 [inline]
 new_slab+0xa2/0x670 mm/slub.c:3454
 refill_objects+0xe3/0x410 mm/slub.c:7338
 refill_sheaf mm/slub.c:2832 [inline]
 __pcs_replace_empty_main+0x376/0x680 mm/slub.c:4703
 alloc_from_pcs mm/slub.c:4801 [inline]
 slab_alloc_node mm/slub.c:4933 [inline]
 __kmalloc_cache_noprof+0x50e/0x670 mm/slub.c:5511
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 acpi_evaluate_object+0xf5/0xe00 drivers/acpi/acpica/nsxfeval.c:177
 acpi_evaluate_dsm+0x19c/0x290 drivers/acpi/utils.c:797
 acpi_check_dsm+0x66/0x260 drivers/acpi/utils.c:830
 device_has_acpi_name drivers/pci/pci-label.c:44 [inline]
 smbios_attr_is_visible+0xac/0x1c0 drivers/pci/pci-label.c:121
 create_files fs/sysfs/group.c:69 [inline]
 internal_create_group+0x51f/0xfb0 fs/sysfs/group.c:189
 internal_create_groups+0x9d/0x150 fs/sysfs/group.c:229
 bus_add_device+0x109/0x6c0 drivers/base/bus.c:573
 device_add+0x9d4/0x1970 drivers/base/core.c:3714
 pci_device_add+0xaef/0x1570 drivers/pci/probe.c:2767
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888105ea6600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff888105ea6680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
>ffff888105ea6700: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
                                                       ^
 ffff888105ea6780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff888105ea6800: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
==================================================================