Extracting prog: 17m34.236748192s
Minimizing prog: 1h45m8.32798181s
Simplifying prog options: 6m51.963989341s
Extracting C: 1m48.546420297s
Simplifying C: 0s
extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac2-syz_usb_control_io$uac1-syz_usb_connect-syz_open_dev$evdev-ioctl$EVIOCSFF-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$printer-write$char_usb-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905", @ANYRES32], 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}})
r3 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109026400020108904a0904000001020d0000052406000105240005000d240f01727d465f050009000506241a08000208241c020004080f09058103ff030981010904010000020d00000904010102020d00000905820208007f06de0905030210"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf3, 0x6b, 0xb2, 0x20, 0x12d1, 0xebed, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xff, 0x6, 0x75, 0x91}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xed, {0xed, 0xb, "dec623ea9c37acd853a94c0ee06116f7d75d8ea080355a0d1581584d101596b28f69e7bdccf2cdbaef4196157fc519873a7028923fd6a95ccd4ed1d2d877bf60336fa38be9fd319dd7925df63608494077a87f7b61defdacc22d042bfe8e25d76b5b2f9eb5136086e380bd9a2b424fb1cb91f5ac8b0562c3216d4c4e4f0d72abd63f9b75a5d82e455d9cbb99998298a27b4db0558d679dea2c34e0f72d2f17f39e92498a17ea78d4385e62609442b7840039ff6f73d21718692d33236377bfcaa631b0e91d63eac29dda51f619e5d45d70033658e5d2d1be6e66fbe31364ed01cc39e02860470d836fd7e8"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x0, 0x3, 0xd7, "4004d8608b8f1ec4db512193a4a39449ed6b52e91c36d09c08da733ba755e8ba4f2ef68cbb18cacd317ec72c25a8f1adb6a9c9164998be6a51704583c5f6ce03f3d64b98860a1dbcc36a835efb2b79df7bcd776f6bffcde65dae062f8a97b169780bd7ba1329c02aa659e8ce6073ce9f93430ec6ee09ea785971257d7946f77d823c61e7b2d52885a05d41eddb21e7b385740f8492b66d04c9a360835b824af3fe5ae087c9c0e1b21559ece1ba8152572c42f520ee324014bfe3412a5bec32ee72a4bf17c0a1b9de0250330d6dc0e9208a7f2708b5512b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000004c0)={0x20, 0x0, 0x59, {0x57, "685139ec73770a93ac3738a204e3647c4ccd0a7722f2274410d49dcc99e467e89cc09871fa94b16a021539f023d682d77c177ef7f6dec98bb1e84575327ce31998c7d2da77dfb9458eced45fd982f9f01c201feea1407e"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0xb6}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xb}})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
syz_open_dev$evdev(&(0x7f0000000100), 0x4a, 0x0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_connect$uac3-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b0000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c2443d4cf8becd3f3b8efc7bb0700000000a3e82f07070d240721060000fd8000"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x2, 'W7'}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x40, 0x30, 0x2, "b200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000080)={0x20, 0x31, 0x2, "658d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001040)={0x40, 0xe, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x7f, 0x0, "6a3e2df0", "613e2e8b"}}, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@0\''], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001700)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="853fcd773551c6060b8ccef91205d3eb1e255d4f89b102b4d11adf1006114aa12ecb96d5ac310cba772528ac302429f589d464a29f563e0ecdf5a92ff6cfe4ea1dacde92f91b9903747d51585fa014dd9a7ed2125f9dd5c1c85789952a56651884676284d0cbc3425041b28534ed51d0295fbf83e76e50a4ea0f5d3dcba3f89dfdb4634c44c245d235601a072896dfff2a2ade64351fc2e661efd2d57848088a5e5d545f591ddc27d9216a0ee97e5f4ecb9fbf0b21a69ecc57a375eedb75ce3ce8858c31af84620002a101a6529c7c470436805a65d77552346466217de638f3786d038f75aa68d49119369239a8a5c4c5cd1b35622f6097c329641ba95f098447d3ad2555653e56d896294e668fbc05fa6df261868c629cb7acb3fa7458f70b943cc6391eec430d9b6ee006411ca90874df8ef8cbd565622d0ec27e0193a0c3a5d6013a4416a4202d1ee6b2cf8feed8a1f3b09bd381ff388aa4f6c5d2772e7a57f62ac4881ac62fcda9bffc13a9238230e3b58c8f11a367c1b1a2a27f04b0f358370437fb46504c4532a16cb520a1c339361c888ce08aa391d186e201bd80f39e349014267b96f6a989b6369a3520c09d22bffea82da756e7936d90bb342d3417ea3a907f5b1b53d6443471122b9528a5bca4a47a3afc9c801d937d2b616c4caf14de6c7517caeaf44419fe7bf1a7776f37372fba2ea379ac69c6075891fc200b82ac89b1ed27f30e8dde11fe511088de12f7242abe329b34726467185bbdc642ca985e0241e19413aafc79e549dba84561b17dfe081ab3048d579ea526c9100821ec9321a50f5a0632dd84bcf7a8d890252fc00284d4219c9fdd3de1b33674176f6ae6ed9a880bc4599d08caa6624c9fb445b4758bce974aadb9c50d5d4a524ec7b961be9bcb1a8dea5ed3c6a9fa39c7bddaa48d3a551e41ef62973c990abe7018c816a426e4ff20e229e583169b1b727147efb1fc3d5f4d331ee08d004ea428ffa690c96b70f7989919a17e0c055793d66e22ffcfff05633481ff150ac892dc0909e967c00c32fd9b25bb130a6196778d79138c38fe2cdac7199147837b06d4c496914c96557d9a1678af85b8e0c7bfca8dce3050b97f96837cb987cd8ef90e6a43a7a88cbf353c3618b70394a3c1fdc325fd36789415f97acb7a5f1e3c541648f1262866ddabcd3b1f91474aea8ede24564fc2823cd2846b4d86e3c57befab3d4a842541dbacb8c5ed43cd9db831e10ad0f1724f373fb777541260c2b1f68965ee64a0b9996a052bb3fae1b666bf31dcc0843724fef9294f685f66676c9f10c9f71eba315a833d27a131272b72acb221b39b98a35e6ea317a7fc5db190f2119c36cf09772c0b080c2f3289b0837e88dd8c36a16dd331a93b3b98a62e005d8e980d6968501b453804a03620b6ce02c8f99295caf2639d03837e267994fe00ca08a19f8f232ea7b590fdb4c76744192894c23fbff4ed3d1007a733e3b3ecf7b2fa5b0d2a4ba390c3cbf58ee41cf634b5b30fbee1a4293f52cfb3431870e152d5db2f9a15006389591278476b0795ac8b4e77ab54cbdf891593427723436bf5118bae083cea754b60627c4cd8f44d5a02a361754357dc101e1c2c069e8a64fafb7968d33254e34be9b4f1395b3c6bf6583ae3ec6dbb6c9df75dc95920abc76fe01e6fe22a467f052b06d324560f3ffcc53f89faa38e53f6221a6583e45d9f8a1b1c07a03620ae22c8411f72a2bffe30a75750ab5ad80e76b8c2d13d8fd403d246413e4bd26d88601c070e0242a068c81b693c9ba3be6e5d359a9cddd02b753f1b900f36bcaef184802d69013c15b0707111f7539ccc827bdbd3708ab4150c6c19cf248bab2fec85d729a92540e80a80cd201c5bdc295107c444cb0b99adafd33dbe9c767eeed626da778bc64e790659e04eefbcd2132c3d5073a4bfcae70d6a7022dfc441aa4879a08d43c830030b2ac09e5ade58f5690ccfdc1c041a66ed5cc4454a0901028c184636d3309a414b62bd20779f4cc769ddc5b42f51589890813f49600b524a673ad817ee10a30b3aa693376d326466190370798cb7ead2ffeb3a0fc4ae3b7e3a0bbc0f5d33219d8f8194ec0d7af06d5f669a1c53803454b6879695bcf164f34214a16cbcb3f4f69335af06c57570d166b1b084667569ae4078921287f6ccfe41ac85d6ccc40842d82760ce2ca8d91a1c959b2729c6b2cd07c20da7e101cac8d78b870a05fa3b38939449a506c6f97f6195c113c2505441469918db8a85abf86f890b657aecc267b078ccd0546669e28bdaa9589e055b4c79d16181ee7edf00bbe1cd4d276b270f0036ff32619fb82ee8598147c1277b1cfabd251bac8429fc862cd7c46a0120109ba30fd4032bae2b41dfe8f97aeca07c94213eedbb8c9faf50c3ef3efb9a58ee451ccfb6f4b5d731d37ccd1b8e11540e014b314140a91dd9b27a66edc565ab382d018e9b840706178f5927e915fcbd86978afbfdc040ced4b8481b8b56afbd9f4b0fc179812aacd19139716ac5dd5fbc6574531ee8efbcefd692b784a9bd85a9ab05b81b0c2b851ff563c6eb5ab122a8ccf444686f62c8883de5d6bb9acb86b1fdaf1a5d533bd9d93e904d594895cf3e0ad9d688f0d93381df7d9dd01604f1bc0a620354762d431a56a424a8424a1837a6cb09dc0610145a660c08135adb1a0bbcebe359d48b4b627b96b53ed8dc80347b190524be0dcea5b4bf832a6d0210859dc8de417788ae7a034b70a3d004afd0e4d862ac4b821985511c5673c0c965a7d674702da98d9fcbeca03793fec6816659b53eaf7a366020aa730911e3bf145f39c1ea8c1f999f86e5815683f1e0cc9994f146d8a5860a922fd590fb19b03d09e855ab729c0c0738b17efd4addaf474d218a582285d474140b69515f7b68e89962f9acc1514c56d6f3470b443c94908495e5157cca47aac02ab173241e7b4eb12961e052e260d028efd7022a3cce203d399345d64fb82f1cede0fc0a0c3d8c6273b9e09bfe60aa9a32900203467fb331349c758b4b432b84c7db7bf06c4b8df05f079a3584e02b31ef023431d90da822cdc993c45b9f5323ed03a1bb39141414c8c5bf0ceab78c2f3b75d2457bc143561fb5a368c722811d040fb1eb8f926b5f48b1a9b712b464a560fb75f5791b15df7837f55fac888e5badbaee5ffe25d5819c58e8a04e336448792bbbcb385edb0e1d5edd9611499626b3bd46c18412f1673da4c64a0453b14b7118cf0be7ba2dd12a274266fe3bbb57fca0bcf9e4359d8d6af0404dd85d054890d985df71cf77e9e5943aed6a6e2608505935d1a9e8ccbd8523819a84d05f3919529b8920db02e63b245ea092b13489700b6359d9f96e6b4cfb0dc601fc89c0565e4bc1e76bf9f1d7c7d8c88bba50812cea14acc1cb295e37edb882b6d16320e88dc6d5a18ef359e4a36f0a984d696817c6becefd60bea6d1e727e700357892b33b5cea5008531fee9f4dafe51d396cadd846e94a6c7d4eb9220a19960a3dd7c228b7f336a8ca122b518eafc7270fcbb1680ecfd09327d2cb5c91caeaf7eb0af162f8c63b7e59519ba27ca6ad1dd91808fc5628cd48e479d6fca0541fbfc49a71246016c534e2d5409f5011cc1ed90368c88b8fd44c6103469b54ecf49e07a8f83333bac0669bf742a8a0bb83387db0bc9aeb689f852fb0abd0215a870af50c8aa6dd27b1758161afcbfc26218e638e0faa4db53a5de5ea3be797faad9ae9e5076e554008214790f5a51d939b7510952aa7bec62ad0055cea84882915e19043c9382e5040514fbe444d6982ca60918dd25bb1e551ef3f1dbbc4f5516a6975584019f0fa9d1d9df83a16be779f2f516672b0456827dc6ac7d8ce3a4c108fb76bfcafdb8c68fd9eb2eb2ead555dc18f04b33d18233fc398291ac6871390f258fecde59ae8dd79b5f59c5e20ec6a3e1ad80d931d31db509222165aae665e3a4d148edb42d2e9119f042e7a646777a1ddc8a9220ff0a931932a87e95663c630c339ffdebe05abe92cd93b3bfb007483f9b462e69232e096e7374f2a49eeefe881f7dc776523c67a944c0f886732a41d30a8cad068613aa3dcbe057516017ad3dad5a6deb5346f672f10117d4e953668f2e586c3683a76a6aeb18036f3f6f0a1bea16faf872f96a2baebf12571f3983ceae19dff0ad7380d0ed4e2c5e7ed532999abe06ee5d1c153d57b42196588029ef2e663a473c9f40b89e9f347ddbf7328f0a7c5be712dd421ce428eb097c6066111e455115b9c57925cd59fa3b06427c0e278927a13bab2331d7ccc89d02060f95b70c58bb498499c2087ddc3452021e2d1ce14697d6e392e6f81c1640a938497a6faecd5c48d3e665f58263894fb72b4799ff0611645987344bf7c15981e8ad5fb75a10eae8e98d3bbf736cc06e5f8608deb175badceb039e783d9ccd1f60bc8018af4339f326cabf36b48afdc87f168b8a2cd2ae72d951c781d5e5687e21f54d6429e326e8981d06b75ab666943343e11ea19ba7d28a0119df15a21f2772f6e517a3b5a1826b5c55265bc1280f8fe8d4974887a26bc4dba6ebda0dfec087bb6b8a8552d231f2fa63e1162d9141222ec84f955b9e47beb3b9c7e8f11da783584be1b4e83849cfeda7db9c617daada897a5da1d84629ceda651a02308257ac4b84eb5d4445f65a9f151d841c1db3a89d6519b8ab58651b5e6945a9e9c3ae5507249447e59d2a44ba4f5484ffcb01b233c03a3aac8612d8bdc194a87d48ef1bc02b92cdd09855609319c5e8503282911e3d4c95b3bf78b084ec8575656b9702412389a7e348c881e435cfedd8733303059dd9065370589440baf22e5ad165329cf3061c5dd1b905e2947ff06b5b94d13e38dd5205c371a73aeaaa6b1a667dec62df274d1abec5dbe8849ed1ca30fe15fb1652ef1a07ddea1491262ee234424162f361345f0dc605f2a797432b6e066db558b5f870b6292865fb6508eb16f4b7b15d10bbdbdf35b2299ed1cb58207cb1af3252dcbd5b31b3eb8c56ede380b72e9927842d9275c9ba9fc7b34660af678a35e642e23b91521b97f6d93f2a74aded97bbcb53ffd7f7a5d3fd087a27b5cae0d411a0e02ef87a7c519e784f8e6c3b77c342059b40565b8bfe8b2b8ee3739b5b19f7a4ca7f1c3378926ad69e7562388226c5399550fd4402729d5a61b9c77da53f5e14c04fba3c6b68ec41e63e71bb8c8d753c9652ac444f0a464d65b7aa88908a26f21c3dc23b403a2e9c4159fd443220f582fe4cfebd0ed2fa5e073b88c5f3e531909cf7e7a9d97a50b23baed9a1baa613b5a6291d3e98a95b45a11caab368cced1033e2c1d727dd847d8caba99ffbab2982a92f594e363f1d562b7f8f4a3898d00ebc53ae5946cc08a473ea7f937396c6d6087e3fb68e1911e81815e300900320700bd00e3a95517b91c135213712f5b07b95c46d845c7f790cf6d06ba6dca5e75116e24796ab6f9bd5f997cf49132cc5c6892878c858142d3ad9cd3946b4f210e3edd16a1535f1188d5c113b2fd6eff544e9007566d29dafeef2bc390ac5f7408dd4fdb608926bc8373425681c84d9c395fa6d79fee6bacd6141b14023ef4cb7afd92c657502009eeecabe96b658bc2cf4c2a48322ce5a0016fc73dc8e526f7d8b46bdb5af31eb687fc372c28b17277ee973e5c0699e0f4a4e8abee1ecb7487f1a191671b18f539b79a07281ed405bd3097e059bc7c9cc5d84e8d8307ace24888b986ca0f08910e9886091ed7bad17c01d196b198a41cb6aea6ea4d8859e89f9a5f0104c29db2f3f30ca5c5", @ANYRESOCT=r2, @ANYBLOB="537b47bddf6d7c8af89277cab5ace3a8b17f59ca24760569cc5cde9acd3dc9f52d0a3ccf2b6ba1ba543177f350c6ebd483b039cd75b7c4e92d70f6f1e9bd9ee5ad6700ac0d0429da39f4a304cec13df61438cd8059bec840"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x18, 0x6e, 0x2b, 0x40, 0x10b8, 0x1faa, 0x6112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xa, 0x0, 0x7, "", [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x55, 0xa3, 0x55, 0xe6}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000cc0)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$lan78xx(r5, &(0x7f0000002dc0)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000003740)={0x84, &(0x7f00000032c0)={0x40, 0x9, 0x7, "8416a80bfdfd6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x105, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0xf, 0xb0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x29, 0x6}, [@selector_unit={0x6, 0x24, 0xc, 0x3, 0x1, 'o'}, @source_unit={0xc, 0x24, 0xb, 0xe, 0x0, 0x5, 0xcc, 0x7}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x0, 0xd]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2a, 0x3, 0x3, 0x7, "ad0e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x39a7, 0x4, 0x8, 0x3a}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc62a, 0x3, 0x5, "ff2d0d5fcebaadb0"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x69, 0xb9, 0x10, {0xa, 0x25, 0x25, 0x2, 0xc0, 0x8934}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x72, 0x1, 0x81}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0xa, 0x3, "96", "e6c8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1000, 0x7, 0x8}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0x25, "3724e7a1b1bc33d00c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xed}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x1, 0x7, {0xa, 0x25, 0x25, 0x73a, 0x1, 0xf24}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x26, 0x7, 0x5, 0xff, 0x4}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x1, [{0xaf, &(0x7f00000008c0)=ANY=[@ANYBLOB="af0392bc3ad719ffffffff09f96713735123c56e63f2a05cabaf4fc16d22796ec5c7f1cce7c8a4867a8bf6634b9ddb6a7659525039a7d44ddd5afa7925a9fb47bd259aec351b59f1595a76548d34a8336f7a30c5c4afae169d1e9cc85dbe9bd7a08ff1b16ee11093363dad99f57823774e3c3821415e10fe2426c9eb94170632668b0d5c963644230b855fb252d62c448b3a6bd4984d1ef5bcc914a7f2a3eb63a940a04feb07de18661b88542a37000000000000"]}]})
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="4013050000d31f18498a783a801af200eb"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCGABS20-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440)
ioctl$EVIOCGABS20(r1, 0x80184560, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x48, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x92, 0x70, 0x18, 0x40, 0x1410, 0xa012, 0xc45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x2, 0x1, 0x50, 0xcb, "", [{{0x9, 0x4, 0x1, 0x8, 0x1, 0xff, 0x3a, 0x14, 0x8, [], [{{0x9, 0x5, 0x6, 0x3, 0x10, 0x1, 0x6, 0x8}}]}}, {{0x9, 0x4, 0x7b, 0x6f, 0x1, 0x42, 0x34, 0xb9, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x9, 0x9, 0x6, [@generic={0x9, 0x4, "41720bf7952d7b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x8, 0x2d, {0x2d, 0x24, "0429fc57581ff8acff2e6d5ef0424e388b3dd2d4636eb2194a47529772a7ad4d9b1172ade12a4cd006da37"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0xe, 0x90, "47715264bfcc7d0c44925e601cd978874c3764ae478862d0e89c0391dc157e5b574384b0557037dbf13ae2830f8140071eaea471e03b357e206452bc274625d9e740dde6f3db1f0d43e223d048a2bcc0ea77b6fbc0ef351a234dfbcfa3b2acb13bf5d6dc0fa2391c37d93099e7adc7177deee3b6efc7e9a0a596fe503faae55592fabad7ef8eb5dd187bebe6a08ee059"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}})
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$sierra_net-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_open_dev$char_usb-read$char_usb-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_open_dev$char_usb-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect$uac1-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x1c, 0x0, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f00000035c0)={0x14, &(0x7f00000034c0)={0x20, 0xf, 0x17, {0x17, 0x2d, "b74a04d69545e99851e858586a2488753b3eb4d8c6"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x6, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00')
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x927}}}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30, 7, 30, 2, 30, 22, 24, 22, 9, 22, 24, 11, 30, 13, 6, 30, 7, 22, 13, 2, 22, 17, 11, 21, 23, 29, 12, 30, 18]
detailed listing:
executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000100)={0x0, 0xb1f20f739382232a, 0x7f, "0400b6139e5bfa847e059417b4635a8720612ac2f53eee066c3cd004fc8a734f1e1bcc3d10cef415c885f394f7c0a4bc3ab67c01ed0a31a83458444b6d970c50f4675cee17c8f926be7f0b89aead7c8e967b7b97105f746f4ebafca6fe7a3de58268a393a1e945a6aee023a6d28d7ae15ab702d7323ff57d27e3b044916d74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x7, 0x62, 0x50, 0x40, 0x424, 0xc001, 0x8bac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x7, 0x80, 0x40, "", [{{0x9, 0x4, 0x31, 0x8, 0x0, 0xb, 0xcb, 0x4d, 0x4}}]}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x1c, 0x14, 0xeffe, 0x9, "cd510591002a493ce0b27464485201ecf2a0000000000000000000000900fff8"})
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYBLOB="9357f01572af9b6561090e825e1bdb1054b137d8467ba85cdd0590389e6baf137886b3146b5e3120dc3768520b091e01c8d338ea6435a43ac218d408db87707575203181d3e3f5e65a1097d3a26c9aa6b0b53f4cb758e2008c28e12fea5f4c6c7d5a759b85f3c49b524fe7e9a16826219ed7ac1363bc5724cb2059210d30847b1f1dfceaaa97716054e0c8bf4d2e1a0053647de5e96193926e68e9a46a4618bf0a4978c68a5dacda12f879c6b3788dda156d66e2c15050cc2ae4a69b77932df71678dee0d78f7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x6547, 0x232, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000100)={0x20, 0x8, 0x5, "e45892696b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000000040), 0x7fff, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000037c0)=ANY=[@ANYBLOB="120100173f14908955bcd015d6c28e90dda84b030000004035120482400001020301090218000101cf40"], &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x410001)
executing program 1:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102a0ce6c2023040a00695f01020301090212000102c2801f0dc00509044d01002f2cebfe"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xc2, &(0x7f0000000100)="03bd3b370c8f663aa08c22a8fe1aeb976b3d39979983cbce5666815368b4283b9f885ea5d25389e6caf8a260e26da6fa778cd5fa25adad64987dae8d64a30e92cd5158e6c7c4c3630272512b5366df9ddd71ecc0b1b81d38bffa18c2fbbe66e1beae2ca9f38cd17d6fcff78a40a210b8ae49158d803c72fcaa0e3f6b0afdca46221383d63cd44c647ff726c4938d0f06b6efd68ff854c0b6877978e03dcaf61e4486d07978d097b87b8c174cddbc149e0fb215c29304f745ef62292d1c44bb8ab3d3")
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0xd, 0x48, {0x48, 0x5, "766b146ffe49f32b7e53eb47fc095ab94291899d2a0824370898a8952a2c25987f73d5d503cdc4ac1fadf6a3b6f1cb1ee747946e2e0fd1da5d3e2bfaa2d11b4aa1fcc8eec3ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0xda, 0x5d, 0x20, 0xeb1a, 0xe361, 0x68c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x9e, 0x0, 0x9, "", [{{0x9, 0x4, 0x78, 0x3, 0x0, 0x91, 0xfb, 0x80, 0x9}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xe8f4, 0xc001)
executing program 4:
syz_open_dev$hidraw(&(0x7f0000000100), 0x6, 0x440000)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=ANY=[@ANYBLOB="001c0400000004e43f18"]}, &(0x7f0000000a40)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="00265d0000008e6456e482c3605722b16c549797dc44582a7b7056f03dc901cd6502f7ae35c3c1e41935073244e63d8ce4c7a8abe3f48afe827d8f3ccfa0cfaf5bf7ff2277e4c3be242dfb17a314faff5e810900000000000000f04f864cce7e653d5a"], &(0x7f0000000580)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000002c0)=ANY=[@ANYBLOB="21e70b30d3a0aa9bb59433f40002000000c60e"]})
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff000000032401070581020002000705020200020007058303"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, &(0x7f0000000580)={0x14, &(0x7f0000000340)={0x20, 0x1, 0xe3, {0xe3, 0xc, "22d607783536073a0b5a2b0580726a5f550e204f90cbaad8d61d65a401c0e25428254a8db9f8e899fa97e9cd79b7125d6d34f32acef0f46a6e9253b80b42673864328ac9a060fe7c89a9b97f688126985f0b2b9026abf434b1ae4e99b65080a57e966527064cfd3d849c40473d36fc55aa4b1f1c455be5440f72d55e94d5bdbc8c5ef0e4a749af937448784dee4ef84c564ae54422ee1136765726722b67951f207ea403c59b49a7640ca2b35cefebe8f0d5c5807d2db6a34dbbbe591b5eb0da0a7b8cdc49ceb1cce29c0847b61fb3e5d6e50f7c215b8ed4b7b1787fa81458c6de"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x694753996eb270bd}}}, &(0x7f0000000740)={0x34, &(0x7f00000005c0)={0x0, 0x15, 0x2d, "25bad82a930f14399d2ff620d49ae26d4115d4d11a2d921cd0c91989b5ce8f187eb2c8ddd82debd54ce3a88490"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f00000006c0)={0x40, 0xa0, 0x4, 0x8001}, &(0x7f0000000700)={0xc0, 0xa2, 0x2f, "1279aa4b858cc24057a4ec35673fa93b34df6bd80f288804e753f9c9f678ffbb09b9190c9449617884f0b12d50e7e6"}})
syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x170e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000200)=""/191)
executing program 2:
r0 = syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e37e1b"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0x6, 0xe7, {0xe7, 0xc, "6317ead3f4be14b613afd7192c20bbdc76e91e8108b7c0fe1f6d956d9a87519b3762cca672a2f2dc6f88374dfb9267170d0b34af0fe2fd699cf155d684003b63816aa4db1db4e98972ffd3cb94c74e65c9edccdd3c318a7595a5f7a026cbfdf0c627d8d14107c584462ac35c103d2cad77580efe1183777f332ae90de91b615a4d1452ba0d2e8d1db8633edc8968e46b31a34319f4e935d1664cabf39cc7790dfdf37b74bd4f0317ba1781385935d7f47e6bc14d253b3e7c001c3f381c066a96a79f3ed1856f1930fa7471b6f20b52747ee69562599172116b27a99516d2af6984e1601daa"}}, &(0x7f0000000140)={0x0, 0x3, 0x67, @string={0x67, 0x3, "ff1a30da319d183fb976bd110afcfccda6653d1263587fff949e230a78eac32a2a9e87bad7d30c5b054b7125ce2874fb0e9f30a2fb3583ebb4bd1bf112949267a3147cd498dff363ba14cbb347334e322d882a2fd3f1146e1b39c35eae9a045c893a375907"}}, &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x7, "151436f3"}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x5aefd39a300d95c0, "da345219"}, @local=@item_012={0x0, 0x2, 0x3}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xd, 0x1, {0x22, 0xb7c}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x40, 0x16, 0x73, "f5d13238dd521e306cbfc3c1369bf1f6e3aca66889d6febfdfcbfe3ec360ea9243040cd3b5889e28a1c18537b05cd8f1a8a7ebfb37721e0e81bd15b3056a8784667e4af863ebffac77d112a44232779f00ade7058acd11d64838ff01523970e991214fa44a0624aba1fefaa7f25fcdf58da55e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x48}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc8}, &(0x7f0000000380)={0x20, 0x1, 0x4c, "655838e6a0b66d6c20a6035910d361b01f5ac74c8b5803409b87482da744e5f2d6a7ae63ff864511f88c559884d484c93067d09e4c4ade092beeb82f11c46be46ca7d6074f0cc16ebf584135"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xc}})
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x14, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRESHEX], 0x0)
ioctl$EVIOCRMFF(r3, 0x550c, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="db50701d568bfbf479bf5101c9934784"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x11, 0x21, {0x21, 0x8, "d6b49b0e61ad3411e978a0eea875a2d97046b59de9ade662c9faf9ac2fc965"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x88}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x8, 0x9, 0x9, 0x0, 0x784, 0x26, 0x6b, 0x8d0d, 0xffff, 0x6, 0x2, 0x3}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000140)={0x20, 0x89, 0x2}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f40)={0x44, &(0x7f0000000c40)={0x20, 0x13, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000001680)={0x24, &(0x7f0000000800)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}, 0x0)
executing program 4:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="40180000")
r1 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r1, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92")
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x23, 0x68, {0x68, 0xa, "8d5c9683d52147c59c05a60ee5ed1c09c53b04244e429ed120f0f22e6c4ea22facb96d894dd016a1fe51aab7238cda32eaf4e1efe2a815f71f45067ca63419583eb7b845d79a20f75791e77ff337f1d41a28909471e7ac65a3007e4392074b82e95fe5deebdf"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0x31, 0xc7, "8d4399c53197764d0180777437fdc52e8a3287001c5573604d4f20d7a2993e8c7592330e619367d32a794afdc862a1ebb86012f3b0443e1a2ae9b0209230089de1597584c962bca6ad10f673734b3017b564f9f24554021c6859838659d500a53631a7aff08c0b7e411cf85a9ed9f2dae57996fdf00f0000cd4fbf3c21d51ddfcabcbb1bc28b1e6d9a714535f93fbf82ae1f2fcc8041b35a710b1e67cb2e0dde4d866a9d071538ba3fe8f6bcf5c2b276c3d7cf6db99cf99aaacc34b1172140e32ef98d2a60b877"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x1, 0x3, 0x4479, 0x1, 0x7d8a, 0xfff9, 0xa9fd, 0x1, 0x6, 0x40, 0x7fff, 0xe}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0xa0ab}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000580)={0x20, 0x89, 0x2}})
r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009080709"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x3b, 0xd7, 0x4e, 0x40, 0x2357, 0x107, 0xa89e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x10, 0x0, 0xf, "", [{{0x9, 0x4, 0xed, 0x7, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x5, "b9fa0471f5"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0)
syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x2, 0x40, {0x40, 0xa, "d832e99041ed87d39b958d07329fb276aeb1cbfb62134f5918fa0a6d59c80a6fdfba474eda13fadcb42a7f0ab853155c4a0ce5d07e031efeebb6484aaa51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x30, 0xc9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0x5bf}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x79, 0x44}}}}}]}}]}}, &(0x7f00000002c0)={0xfffffffffffffdfc, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) (async)
r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_connect(0x3, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x62, 0x35, 0x44, 0x8, 0xace, 0x1611, 0x5821, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xa2}}]}}, 0x0) (async)
syz_usb_connect(0x3, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x62, 0x35, 0x44, 0x8, 0xace, 0x1611, 0x5821, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xa2}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0xffe7, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcb, 0xe0, 0xdc, 0x10, 0x2ef5, 0x8, 0x3244, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x60}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124020101020000000000000000020d000924030201010001"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac2(r3, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x20, 0x4, 0x6, {0x6, 0x10, "c5ababde"}}, 0x0}, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x81, 0x3, "054468"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$hid(r2, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000cc0)={0x18, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\b?\x00\x00\x00,'], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x0, 0xe8fe7249061de526}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
syz_usb_control_io$uac2(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001380)={0x34, &(0x7f0000000000)={0x20, 0xf, 0x10, "a704a400d6019037b5f4074b326e0000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
executing program 2:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async)
r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x3, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0) (rerun: 64)
syz_usb_ep_write(r1, 0x82, 0x41, &(0x7f0000000080)="01000000000000000404000000000053146935087333f8dedeb118dd7da25cab89f562c331cf4480eadce5b1ceab017d399e7af0c8bac4411fd955944c608337cc") (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="1201500210a793080410aa61830701020301090212000100f750000904c00a00020600073a17"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000080)="40002048d6")
executing program 4:
syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000037c0)=ANY=[@ANYBLOB="120140030000004035120482400001020301090218000101cf40030904000000010300d306240202050f"], &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) (async)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) (async)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000020700c12f0400001020301090224000101ff50090904000d01030100000921beff770122b10f09058103ff03035a60330b38c3732ef265012e81c0d82bb2d2419766864ad50a211b78a66b49d38fdbf21cafda3d30f9c191faaa3860c79acfd893af114a6d81ac322197d2075eb943b1113427a9d0e3fafade04caee21788bead25a641fb55f3fc4a6a06a5bc44ab330b3fd20c822d28f37e20ce5"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) (async)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0x8d, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2"}, 0x0, 0x0}) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000080)="0041c3")
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x8a700)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0)
r3 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff0021000705010240000007050202400000070504024000000705060240000007058103400001070588"], 0x0)
syz_usb_ep_write(r3, 0x88, 0xb, &(0x7f0000000080)="0015dc84dabdf1803fc378")
syz_usb_connect$uac1(0x1, 0x7b, &(0x7f00000007c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x499, 0x102b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xa0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5b, 0x1, 0x0, 0xad, 'd'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9, 0x1466}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x4, 0x4, 0xf7, 0x8, 0x8}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x439}}]})
syz_usb_ep_write(r2, 0x81, 0xd9, &(0x7f0000000140)="f5eafcd5b3141167e024377271376a27c32e0818ec789eee31ec3903d38c12200f3471d287309d60ba6d0cd9e16e57393811870d25e592bd5a661748072abee75f1bcdd1cec9ee30fd38051862451150b7f16e574670ae7723ecf2de1884317875ac4eefd91b61cb2df395fff92fe61552377a4c072def26521dbb615e2d9e9339206ea85d073a9b6948e1ef75a23f5d9b931467b07c1d326660acd49afc1c3662ca24d0c31d0e493f34e14f19213f7464765b7b6b0888b7e4c7c95062d67b290506a0d9fe")
r4 = syz_usb_connect(0x4, 0x3bd, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x8a, 0xd, 0x8e, 0x10, 0x1b3d, 0x9312, 0x9411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ab, 0x1, 0x26, 0x7, 0xe0, 0xd, "", [{{0x9, 0x4, 0x98, 0x5, 0xd, 0xa6, 0xef, 0xe5, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x17}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0xb, 0x6, 0x7], 0x83}]}], [{{0x9, 0x5, 0x6, 0x8, 0x40, 0x8, 0x4d, 0xfc, [@generic={0x87, 0x24, "855617d9eb7673de2b2e236d8b7c0e49de15e547e5662d90385bec311586292f74318b8771721a93c2a86388bea8507bf72235f7518d8cd95f4c62b2510d6a0a6c1e41166c71c4408f78e90c7f6108ec0ea425d7c5e4f15d594f6e241f72898aaf686e428f84a9ea8052ab47ad9a2c569931642f643ce9b2e553c858520c657d22f3841677"}, @generic={0x4a, 0x7, "8121c82e9bb913d4c11c00a5099187be4b0a9c8770b55f185c734870cdc2c316fccaddeed7aa2d37e52bf9876c06679f867da2763923ae512816f44b8ccd0d852bb986669b6980b8"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}, @generic={0xdf, 0x21, "08313fb4d59083c2093e32a80678869ef317f3f8db2b24f865f4feebd8a85f74242488b6a6c6d7b1887820583ac31fa9a990a5108c45e814438e2d785f8fcdd5e50a1a8a9e8aae04ef8018702e37654ef83cf26b860087a97d50b6bef04f52903a982ce78f5f42c47f0e7c261f99fd7b38b8d289e6268915fb142eeb22dfee07792b075786ffe58c6ca46de191b077eed3bb15e377b868a1ea899afc3016e31d24104811f38603191f9b905fa65fa42964ab655012ee1a61de1b15d2c0f9c1a49b232da00d87678ce941c1198e0ccfed16ee7c915ca1fc6473d6512c94"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x5, 0x6, 0x1, [@generic={0x67, 0x21, "e39b1f7d36de1d73b818732223b4018340cd49a8da4da8a9e72e20ab877888edbb83b8926562d1ecc9909b619ba2d4c21e933b842128c4f6d9eb22684189ea8ffb743dae8f22e7fdead16c81aea3f5f5cf0f1073dd080f051bc96b8ee30c62937165c86e7a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x6, 0x10, [@generic={0x93, 0x4, "58007d69874cc60d8051bc72df146cf4763a058aaa5b1100b9fec07cc3d7b0fac6fdb325d0971e86aa134995346559edbb602ca5ef52fe2532abe0f44a1bc66c5e9ca6bf5d316770ab5516ce946d564b3ba6fbd9545796676a9b3818008d514d52756160b4441367e6e82f924a4d9a088ad840098b30738ca66c66690bff73703f453a27cba4d61fcb23842cfcabb79776"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x67, 0x400}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xb, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xb7b}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x800}]}}, {{0x9, 0x5, 0x9eea941e9a528265, 0x10, 0x200, 0x0, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf7, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xb, 0x6ddca5470f230e62, 0x200, 0xe5, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x9ee}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x8, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x414f7c568a194b03, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x9, 0x0, [@generic={0x8, 0xf, "709f70e6e385"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x4, 0x4, 0x0, 0xff, 0x8}, 0x27, &(0x7f00000006c0)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x49, 0x3, 0x40, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c478dd10acefb49f0510573931755176"}, @ptm_cap={0x3}]}, 0x9, [{0xc, &(0x7f0000000700)=@string={0xc, 0x3, "3420a6aff2e012c74c7e"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x9a1b}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x42b}}, {0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="be0353391ee619fee8ef1e192d4cef355453baa75479b0288b35ddf26e643b38ce909cff1e7a9954b5bb9981b7eff05fbd39f4921552153a2098133f61b0f83cfbf6efc8080096627d41f7d049f6fc98d2655998a12ab9a28e12e38960b7b501c1e138eee528ed4b3f031eb4a7285711e371ad2ae1d418a6ed43e28afdb672952c683bd9297e9b5674cc8c5176943c27530cc1e3b33cafc1870bfcb105b386442af9d26579796ed4174bf761549377032b9c905f53405a966ddc4271000000000000"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x280a}}, {0xf3, &(0x7f00000008c0)=@string={0xf3, 0x3, "dbebefbef6209c0579df02737bef8180af9ba2169c319fa20ac30565579eb4f788f84063e1fa557860653f9761dd173ab3014e14cac12febf8e0f4835916cbac73ed5c973b6e680c53245f322119cdfd77c4100a83aea8c4b2e7e627a199f87d5b21e2e7c119cce009236fe194d0a008594f57fafb72b363e34b1f907f049d2864857a97dd651c83489aff0ad2679670a701a1101df88f4d0c995daaadeec19d3ef1ec6cce180652f9c5c942cf2a7b4b220636924edcc0f74518af8b58a50e5088957ad8943dfbf33ef113ca8360d0fdd9f4d4266441639ef033cec548458720084d4cca1aa668725aa1215ba46512e368"}}, {0x4a, &(0x7f00000009c0)=@string={0x4a, 0x3, "40c05d614063de52bea00099f3240c338eb311718f3b0de9dd7e92a0cbd088d055a9b9f4a0217841b8b923fdd8291f87d3a3083c6903a70bb539e0162540b07b8688c062db5999b6"}}, {0xbd, &(0x7f0000000a40)=@string={0xbd, 0x3, "bfe998e299bf0d1ae4bf198a18079e8432649ae891afdd7834da7075ecaca2e56ca7becefc8bb971a29c852db2f031aed17358642ff41371d957908744c2811b219cd5be97922127d6204a12fd1523466367680741b13acbfeee3928b88095589620bb3e6a211b82ea8bcc0ee9268f2edaf10ae6686dbb0e93474dc123efe69304bb9ea5813a8e378ec09e7cb76248441babcceecf5d94077d52c4c2bf5bc6eda2aed4bdc7bea596c17dc5c2e017ec7aa1ee7684bc0620285c63c3"}}, {0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "d1b30a05b1c6e7e8b47224d48b7d9f74193fe168eebd8c698306bca448c207fcb5a13f9c1421cc3ef61cf42e3ad16bf5d2be5f351c39d9568e8194fc79712fb24feb3c8ca7"}}]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
ioctl$EVIOCGREP(r0, 0x5450, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000e40)={0x14, &(0x7f0000000100)={0x20, 0x31, 0xb, {0xb, 0x8, "9376da007f1e13a95d"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e80)={0x40, 0x2, 0x39, "9c70c136e491687d2ebb753de334864cc639399ba5fcff989c64012770a0f59fa0769eee3edf55381554246926e218c6ba50370ffb20e0e346"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f40)={0x20, 0x80, 0x1c, {0x0, 0x7fff, 0x800, 0x1, 0x148f, 0x7, 0x4, 0x4, 0x8, 0x0, 0xa55, 0x101}}, &(0x7f0000000f80)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001040)={0x20, 0x89, 0x2}})
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x8a700) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) (async)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) (async)
syz_usb_connect(0x3, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff0021000705010240000007050202400000070504024000000705060240000007058103400001070588"], 0x0) (async)
syz_usb_ep_write(r3, 0x88, 0xb, &(0x7f0000000080)="0015dc84dabdf1803fc378") (async)
syz_usb_connect$uac1(0x1, 0x7b, &(0x7f00000007c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x499, 0x102b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xa0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5b, 0x1, 0x0, 0xad, 'd'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9, 0x1466}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x4, 0x4, 0xf7, 0x8, 0x8}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x439}}]}) (async)
syz_usb_ep_write(r2, 0x81, 0xd9, &(0x7f0000000140)="f5eafcd5b3141167e024377271376a27c32e0818ec789eee31ec3903d38c12200f3471d287309d60ba6d0cd9e16e57393811870d25e592bd5a661748072abee75f1bcdd1cec9ee30fd38051862451150b7f16e574670ae7723ecf2de1884317875ac4eefd91b61cb2df395fff92fe61552377a4c072def26521dbb615e2d9e9339206ea85d073a9b6948e1ef75a23f5d9b931467b07c1d326660acd49afc1c3662ca24d0c31d0e493f34e14f19213f7464765b7b6b0888b7e4c7c95062d67b290506a0d9fe") (async)
syz_usb_connect(0x4, 0x3bd, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x8a, 0xd, 0x8e, 0x10, 0x1b3d, 0x9312, 0x9411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ab, 0x1, 0x26, 0x7, 0xe0, 0xd, "", [{{0x9, 0x4, 0x98, 0x5, 0xd, 0xa6, 0xef, 0xe5, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x17}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0xb, 0x6, 0x7], 0x83}]}], [{{0x9, 0x5, 0x6, 0x8, 0x40, 0x8, 0x4d, 0xfc, [@generic={0x87, 0x24, "855617d9eb7673de2b2e236d8b7c0e49de15e547e5662d90385bec311586292f74318b8771721a93c2a86388bea8507bf72235f7518d8cd95f4c62b2510d6a0a6c1e41166c71c4408f78e90c7f6108ec0ea425d7c5e4f15d594f6e241f72898aaf686e428f84a9ea8052ab47ad9a2c569931642f643ce9b2e553c858520c657d22f3841677"}, @generic={0x4a, 0x7, "8121c82e9bb913d4c11c00a5099187be4b0a9c8770b55f185c734870cdc2c316fccaddeed7aa2d37e52bf9876c06679f867da2763923ae512816f44b8ccd0d852bb986669b6980b8"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}, @generic={0xdf, 0x21, "08313fb4d59083c2093e32a80678869ef317f3f8db2b24f865f4feebd8a85f74242488b6a6c6d7b1887820583ac31fa9a990a5108c45e814438e2d785f8fcdd5e50a1a8a9e8aae04ef8018702e37654ef83cf26b860087a97d50b6bef04f52903a982ce78f5f42c47f0e7c261f99fd7b38b8d289e6268915fb142eeb22dfee07792b075786ffe58c6ca46de191b077eed3bb15e377b868a1ea899afc3016e31d24104811f38603191f9b905fa65fa42964ab655012ee1a61de1b15d2c0f9c1a49b232da00d87678ce941c1198e0ccfed16ee7c915ca1fc6473d6512c94"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x5, 0x6, 0x1, [@generic={0x67, 0x21, "e39b1f7d36de1d73b818732223b4018340cd49a8da4da8a9e72e20ab877888edbb83b8926562d1ecc9909b619ba2d4c21e933b842128c4f6d9eb22684189ea8ffb743dae8f22e7fdead16c81aea3f5f5cf0f1073dd080f051bc96b8ee30c62937165c86e7a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x6, 0x10, [@generic={0x93, 0x4, "58007d69874cc60d8051bc72df146cf4763a058aaa5b1100b9fec07cc3d7b0fac6fdb325d0971e86aa134995346559edbb602ca5ef52fe2532abe0f44a1bc66c5e9ca6bf5d316770ab5516ce946d564b3ba6fbd9545796676a9b3818008d514d52756160b4441367e6e82f924a4d9a088ad840098b30738ca66c66690bff73703f453a27cba4d61fcb23842cfcabb79776"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x67, 0x400}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xb, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xb7b}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x800}]}}, {{0x9, 0x5, 0x9eea941e9a528265, 0x10, 0x200, 0x0, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf7, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xb, 0x6ddca5470f230e62, 0x200, 0xe5, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x9ee}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x8, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x414f7c568a194b03, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x9, 0x0, [@generic={0x8, 0xf, "709f70e6e385"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x4, 0x4, 0x0, 0xff, 0x8}, 0x27, &(0x7f00000006c0)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x49, 0x3, 0x40, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c478dd10acefb49f0510573931755176"}, @ptm_cap={0x3}]}, 0x9, [{0xc, &(0x7f0000000700)=@string={0xc, 0x3, "3420a6aff2e012c74c7e"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x9a1b}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x42b}}, {0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="be0353391ee619fee8ef1e192d4cef355453baa75479b0288b35ddf26e643b38ce909cff1e7a9954b5bb9981b7eff05fbd39f4921552153a2098133f61b0f83cfbf6efc8080096627d41f7d049f6fc98d2655998a12ab9a28e12e38960b7b501c1e138eee528ed4b3f031eb4a7285711e371ad2ae1d418a6ed43e28afdb672952c683bd9297e9b5674cc8c5176943c27530cc1e3b33cafc1870bfcb105b386442af9d26579796ed4174bf761549377032b9c905f53405a966ddc4271000000000000"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x280a}}, {0xf3, &(0x7f00000008c0)=@string={0xf3, 0x3, "dbebefbef6209c0579df02737bef8180af9ba2169c319fa20ac30565579eb4f788f84063e1fa557860653f9761dd173ab3014e14cac12febf8e0f4835916cbac73ed5c973b6e680c53245f322119cdfd77c4100a83aea8c4b2e7e627a199f87d5b21e2e7c119cce009236fe194d0a008594f57fafb72b363e34b1f907f049d2864857a97dd651c83489aff0ad2679670a701a1101df88f4d0c995daaadeec19d3ef1ec6cce180652f9c5c942cf2a7b4b220636924edcc0f74518af8b58a50e5088957ad8943dfbf33ef113ca8360d0fdd9f4d4266441639ef033cec548458720084d4cca1aa668725aa1215ba46512e368"}}, {0x4a, &(0x7f00000009c0)=@string={0x4a, 0x3, "40c05d614063de52bea00099f3240c338eb311718f3b0de9dd7e92a0cbd088d055a9b9f4a0217841b8b923fdd8291f87d3a3083c6903a70bb539e0162540b07b8688c062db5999b6"}}, {0xbd, &(0x7f0000000a40)=@string={0xbd, 0x3, "bfe998e299bf0d1ae4bf198a18079e8432649ae891afdd7834da7075ecaca2e56ca7becefc8bb971a29c852db2f031aed17358642ff41371d957908744c2811b219cd5be97922127d6204a12fd1523466367680741b13acbfeee3928b88095589620bb3e6a211b82ea8bcc0ee9268f2edaf10ae6686dbb0e93474dc123efe69304bb9ea5813a8e378ec09e7cb76248441babcceecf5d94077d52c4c2bf5bc6eda2aed4bdc7bea596c17dc5c2e017ec7aa1ee7684bc0620285c63c3"}}, {0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "d1b30a05b1c6e7e8b47224d48b7d9f74193fe168eebd8c698306bca448c207fcb5a13f9c1421cc3ef61cf42e3ad16bf5d2be5f351c39d9568e8194fc79712fb24feb3c8ca7"}}]}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
ioctl$EVIOCGREP(r0, 0x5450, 0x0) (async)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000e40)={0x14, &(0x7f0000000100)={0x20, 0x31, 0xb, {0xb, 0x8, "9376da007f1e13a95d"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e80)={0x40, 0x2, 0x39, "9c70c136e491687d2ebb753de334864cc639399ba5fcff989c64012770a0f59fa0769eee3edf55381554246926e218c6ba50370ffb20e0e346"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f40)={0x20, 0x80, 0x1c, {0x0, 0x7fff, 0x800, 0x1, 0x148f, 0x7, 0x4, 0x4, 0x8, 0x0, 0xa55, 0x101}}, &(0x7f0000000f80)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001040)={0x20, 0x89, 0x2}}) (async)
executing program 1:
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000001200)={0x2, 0xffffffff})
r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x2357, 0x3af5f860f3f297bd)
ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000001c0)={{0x2, 0x2, 0xffffffff, 0x8, 0x2, 0x10000}, 0x188, [0x2, 0xbd, 0xaa, 0xffffffff, 0x80000001, 0x8, 0xa83, 0x8, 0x9, 0x8, 0xff, 0x7, 0x1, 0x3, 0xc3, 0x2, 0x44368259, 0x4, 0x400, 0x0, 0x2d4a, 0x10, 0x0, 0x9, 0x9, 0x5, 0xcb7b, 0x5, 0x2, 0x2, 0x9, 0x1, 0x8000, 0x7, 0x4722, 0x0, 0x5, 0x81, 0x6, 0xffffffff, 0x4, 0x8, 0x9, 0x4, 0xe, 0x1, 0x7, 0x2, 0x0, 0x9, 0x9f4, 0x9953, 0x1, 0x0, 0x10001, 0x17, 0x0, 0x9fcd, 0x9, 0x4, 0x5, 0x80000001, 0xf, 0x80000001, 0x3208, 0xb69, 0x9, 0x5, 0xe, 0x1, 0x1, 0x0, 0xfffeffff, 0x4, 0x6, 0x0, 0x2, 0x4, 0x2, 0x2, 0x8, 0xd9, 0x9, 0x2, 0x6, 0x4, 0x2dd, 0xa447, 0x4249, 0x5, 0x0, 0x8000, 0x9, 0x4, 0xcd, 0x0, 0x74, 0x1, 0x5, 0x800, 0x3, 0x9, 0x66f, 0x7, 0x6, 0x10000, 0x0, 0x6, 0x3, 0x8, 0x9, 0xff, 0xd6, 0x1, 0x3, 0x81, 0xa, 0x3, 0x2, 0x7, 0x4, 0x7c93, 0xff, 0x0, 0x26, 0x6345, 0xd, 0x6, 0x5, 0xd, 0x4, 0x2, 0xec, 0x2, 0x8, 0x0, 0x54b, 0xfffe0000, 0x4, 0x4, 0x9, 0x162f, 0x9, 0x6, 0x9, 0x9, 0x6, 0xf3, 0xf5, 0x1, 0xfffffff7, 0x0, 0xa10, 0x9, 0x0, 0xd, 0xcf, 0x4, 0xfffffffd, 0xffffffff, 0x810, 0x2, 0x2, 0x8, 0x2ce9, 0x8, 0x1, 0x2, 0x6, 0x3, 0x7, 0x4, 0x2, 0x6cba, 0x1000, 0x6, 0x2, 0xa, 0x8cc, 0x9, 0x2, 0xfffffdc4, 0x46, 0x5, 0x636, 0x3, 0xfffffffe, 0x2, 0x0, 0x5, 0x7, 0x1, 0x5, 0x7fffffff, 0x40, 0x8, 0x7f, 0x7, 0x6d6f, 0xff, 0x100, 0x9, 0x0, 0x40, 0xfffffff9, 0x7, 0x2, 0x4, 0x3, 0x8, 0x80000000, 0x80000000, 0x0, 0xb, 0x1ff, 0x3, 0xfffffffa, 0x8000, 0x4, 0x3, 0x1, 0x9, 0x4, 0x6, 0x0, 0x8, 0x1, 0x80000001, 0xd7, 0x3, 0xffffff81, 0x84f, 0x1, 0x7, 0x1, 0xa, 0xffffffff, 0x200, 0x40, 0x7, 0xffffffff, 0x9c2, 0xaaf, 0x80, 0x1, 0xcbe, 0x5, 0x8, 0x10000, 0x3, 0x6e, 0x5, 0x6, 0x40, 0xbe, 0x7fff, 0x6, 0x0, 0xd, 0xb4, 0x0, 0x5700, 0x100, 0x7, 0x1ff, 0x6, 0x80, 0x5, 0x4, 0x100, 0x1, 0x1, 0x7, 0x8, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x14, 0x2, 0x1, 0xff, 0x5, 0x18000000, 0x6, 0x24ce822f, 0x3, 0x5, 0x1d65a48b, 0x6, 0x5, 0xe5, 0x700, 0x2, 0x0, 0x3, 0x3, 0x5, 0x100, 0x7, 0x6, 0x101, 0x8, 0xffffffff, 0x7, 0x8, 0x6, 0x7ff, 0x5, 0x1, 0x1ff, 0x9, 0x7, 0x7fffffff, 0x7f, 0x8, 0x6, 0x1ff, 0x2, 0x6, 0x3, 0xff, 0x8, 0x100, 0x100, 0x3, 0x0, 0x37e, 0x2, 0x9, 0x1ff, 0x0, 0x1, 0x0, 0x1, 0x4, 0x400, 0xd, 0x2, 0x5, 0x8, 0x2a, 0x40, 0x0, 0x1ff, 0x7ff, 0x7f, 0x2, 0x4800, 0x8, 0x10000, 0x6, 0x4dd, 0x7ff, 0x8000, 0x3, 0x8190, 0xb55, 0x6, 0xd, 0xc9c, 0x5, 0x3, 0x1ff, 0x8, 0x1, 0x3, 0x81, 0x3, 0xd, 0x9, 0x6, 0x8, 0x3, 0x0, 0x0, 0x1c0, 0x0, 0x7fff, 0x700000, 0xfc, 0x2f620d66, 0x0, 0x1, 0x9, 0x7, 0xa, 0x9, 0x8, 0x133, 0xffff, 0x49de, 0x9, 0x7fffffff, 0x7, 0xf, 0x17ea, 0x101, 0x158, 0x8, 0x528, 0x7, 0xf, 0x6, 0x5, 0x3, 0x3, 0xd000, 0x1, 0x0, 0xa12f, 0x7, 0x4, 0x5, 0xffff, 0xffffffff, 0x3, 0x9, 0xfffffffa, 0x6, 0x10, 0x2, 0x6, 0xfffffc00, 0x0, 0x6, 0x9, 0x4, 0x2, 0x8, 0x1b, 0x1, 0x29d, 0x6, 0x3, 0x9, 0xffff6181, 0xcfc, 0xffe00000, 0x3, 0xfffffffc, 0x200, 0x97, 0xfff, 0x3, 0x4c, 0x4, 0x64fa, 0x7, 0x7fff, 0x8, 0xfff, 0x6, 0x14000, 0xa2, 0x5, 0x4, 0x3ff, 0x4, 0x17, 0x492, 0xffffffff, 0x8c, 0x5, 0xd8, 0x10000, 0x80000000, 0x8, 0x7, 0x0, 0x3, 0x8, 0x1, 0x5, 0x101, 0x75a, 0x800, 0x68, 0xffffffff, 0x7, 0x80, 0x8, 0xfffffffb, 0x100, 0x4, 0x3, 0x2, 0x1, 0x0, 0x0, 0x6, 0x1, 0xfffffff8, 0x6, 0x7, 0x8, 0x3, 0x7, 0x3, 0x401, 0x1ff, 0x0, 0x1, 0x6, 0x6, 0x4, 0x0, 0xffffff7f, 0xfffffffe, 0x0, 0xfffffffd, 0x1, 0x80, 0x94, 0xd, 0x5b3477b5, 0x0, 0x5, 0x3b3f, 0x400, 0x5, 0x6, 0x9, 0x7, 0x0, 0x0, 0x401, 0x4, 0xfffffc00, 0xabbd, 0x6, 0x1, 0x7, 0x8, 0x8, 0x4, 0x8, 0x5, 0x4fd9, 0x9, 0x1, 0x7, 0x1, 0x0, 0xb4f1, 0x80000001, 0x7, 0x2, 0x2, 0x1, 0xc, 0x401, 0x81, 0x0, 0x1, 0x5, 0x8, 0xfffffff8, 0x1, 0x2, 0x8, 0x9773, 0xaf98646, 0x1, 0x7fffffff, 0x80000000, 0xffff, 0xffffffff, 0x3, 0x727, 0x1000, 0xfffffffa, 0x9, 0xf92, 0x2, 0x9, 0xfffffe01, 0x3, 0x3, 0x9, 0x0, 0xffffff0a, 0x39, 0x5, 0x2, 0x9, 0x8, 0x5, 0xd, 0x8001, 0x8, 0x0, 0x100, 0x2, 0x8, 0x8ccf, 0x7, 0x800, 0xd, 0x3, 0x5, 0xb66b, 0x3, 0x92, 0x3da, 0xfffffb80, 0x400, 0x3ca, 0xebe, 0x81ad, 0xfffff000, 0x9, 0x3ff, 0x0, 0xfffffff0, 0x7, 0x7c8f, 0x7, 0x2, 0x10001, 0x158, 0x2, 0x7fff, 0x8, 0x7fffffff, 0x3, 0x8, 0x85, 0x6, 0x91, 0x48d, 0x23d8, 0x2000, 0x4, 0x8c63, 0x6, 0x619c, 0x9, 0x5fcb, 0x80000000, 0xffffc59d, 0x9, 0x5, 0x9, 0x5, 0x0, 0x3, 0x8, 0x9, 0xdf, 0x10, 0x332d, 0xe, 0x1, 0x6, 0x6, 0x4, 0x6, 0x8000, 0x1, 0x40, 0x2, 0xc410, 0x101, 0x0, 0xb981, 0x1, 0xf, 0x5, 0x1000, 0xc, 0xdd, 0x5, 0x3, 0x9, 0x5, 0x2512, 0x4, 0xd26, 0x3, 0x0, 0x9, 0xbf44, 0x3, 0x9, 0x0, 0xb84, 0xc, 0x80000001, 0x92, 0x6c04, 0x401, 0x7, 0x5, 0x3, 0xfffffffe, 0x7, 0x0, 0x2, 0xfffffffc, 0x7fffffff, 0x8, 0x0, 0x2, 0x7, 0x9, 0xfffffffe, 0xaf, 0x0, 0x0, 0x47bae6e, 0x5, 0x1cf9, 0xe49, 0x5, 0x8001, 0x6328, 0x6, 0xfff, 0x78, 0x6, 0x80000000, 0xffffffff, 0x0, 0xc4, 0x834, 0xffff8102, 0x6, 0x8, 0x21, 0x7fff, 0xa1f, 0x1, 0x2, 0x6, 0x40, 0xfff, 0x5, 0x32c72480, 0x0, 0x5, 0xe7a, 0x9, 0x7, 0x9, 0x4, 0xccb6, 0x7ff, 0x9, 0x9, 0x70000000, 0xfff, 0x0, 0x2, 0x61, 0xe, 0x8, 0x8, 0xc9c, 0x7fff, 0x4, 0x1000, 0x39, 0xa26, 0x3, 0x1, 0x7fffffff, 0x401, 0x0, 0x10000, 0x4, 0x7, 0x1, 0xfe000000, 0xa, 0x2af, 0x8001, 0x0, 0xf, 0xfffffff9, 0x40000000, 0xf94, 0x4, 0x7ff, 0x1, 0x100, 0x1ff, 0x3, 0x4, 0x7, 0x7, 0x8, 0xa, 0x3, 0x6, 0x9, 0xfd, 0x2, 0x7, 0x6000000, 0xfc000000, 0x7, 0x5803, 0x4, 0x3, 0x3, 0x1, 0x4, 0x2, 0xab5b, 0xffffff00, 0x401, 0x9, 0x3, 0x1, 0x6, 0xc, 0x0, 0x4, 0x8, 0x2, 0x10b, 0x68ae, 0x5, 0x80, 0x5, 0x3, 0x800, 0x4, 0x664, 0x0, 0x2b, 0x2, 0x7, 0xfffffff3, 0x6, 0x8001, 0x10000, 0x3, 0x6, 0x6d, 0x5, 0x8, 0x0, 0x9, 0x40, 0x49, 0x0, 0x6, 0x0, 0xd, 0x3, 0x8000, 0x10001, 0x80, 0x6, 0x0, 0x4, 0xa00, 0x8, 0xfffffffb, 0x8, 0x5, 0x9, 0x8, 0xfffffffa, 0x0, 0x2, 0x9, 0x9, 0x5, 0x3, 0x7fffffff, 0x3, 0xc15, 0x26dc, 0x0, 0x4597, 0x4, 0x0, 0xb8a6, 0x0, 0x8, 0x2d1ce073, 0xc6, 0x7df, 0x9b5, 0xe, 0x8, 0x17ae, 0x3ff, 0x8, 0x8, 0x6, 0xffffffff, 0x55d, 0x6, 0x5, 0x86d, 0x2ec, 0x3, 0x6, 0x6, 0x3, 0x3ff, 0x5, 0x4, 0x3, 0x8, 0x1, 0x5, 0x2, 0x8, 0x7, 0x5, 0xfff, 0x8000, 0xf9, 0x8, 0x38, 0xd5, 0x10001, 0x8, 0x5, 0x57c2, 0x8000, 0x3, 0x5, 0x2995ce18, 0x9, 0x1, 0x9, 0xfffffffe, 0x2, 0x4, 0x6, 0x3ff, 0xb, 0x2, 0x8, 0x5, 0x3, 0x1b1, 0x40, 0x4, 0x800, 0x1, 0x2, 0xb, 0x1, 0x5, 0xca8f, 0xe, 0x8, 0x63c2485a, 0x4, 0x0, 0xe0000000, 0x30, 0x2, 0x1a, 0x9, 0xc4, 0x6, 0xffffffff, 0x9, 0x3, 0x5, 0x0, 0xa, 0x7f, 0xe9f4, 0x4, 0x7, 0x1ff, 0x80000000, 0xe, 0x5, 0x6, 0x7ae3, 0x1, 0xd, 0x2, 0x2, 0xb8e3, 0xec, 0x7, 0xef, 0x800, 0x4, 0x8, 0xfffffffe, 0x1eb, 0x3ff, 0x7, 0xb, 0x4, 0x0, 0xccc9, 0x1, 0x5, 0x3, 0x3, 0x8, 0x2, 0x7c08, 0x4, 0x6, 0x4, 0x100, 0xc, 0x200, 0x4, 0x9b, 0x7, 0x401, 0x7, 0x10001, 0x2, 0x2, 0x9, 0x4, 0x3]})
syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/177)
syz_usb_ep_write(r1, 0x81, 0xfffffffffffffdb4, &(0x7f0000000080)="96")
executing program 3:
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0025033fdb0009047dbee8256c93d58a54a92a48647a02ba9ac06cb8480ecc7363e2a1594a4484e12c3c58227814a1c752f6b1a28abb000246fb9bc47fb79469745eb8"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904000d020301010509210500770122b10f0905810320000308640905020300"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x22, {0x22, 0x1, "88ff5cb5e85ead4c31157eab1db3e450c83cc44e2a58111c57c4f48570e08106"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220000000079f1ad135ae2a816489da8ae627b17781a2510fd370fc96360d69947bcfd2a9f78823a5cf5133473d4e9894390d483de293c15d9eb48bcaf5f595a17545ecbe19280acd14954a76aa41c63d2524f50856e6d60824d91d34fc379bc0eb75e3d140aeb4c32608dd08747caa042816ad4273c5ed00d541f42e00eaf1a4d12be7af468c79dc3a1acd861583b2c2062251964c4b6f53ec8f6f49a3b732d0a76f45ef34bbfcfadcf463852ad"], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x20, 0xb, 0xf2, {0xf2, 0x1, "283aa073a04ed9b991070de7ec7469d5899dccd5af6985ec33fd0b51c7b8a37268cb7ad6000cb030aa40baa370edfdf34f2a7c43d9731c85c94c986e92ce1876c8f03bb9beb3cf911ef40aa1182f54c4b06a302aaa8722bbf6ba4b4c43d2c1d583534931639cd203f46a5f2e748203e713ad9fb6b55c2c5627a3ca37d079efe0e6dbe128629618a420e0035a006b4211002ad503cd3f79cc2dfc4a1a25d19536be90570afe6d1356d524ae650a57e8a693cb2619bf266dc8691210cfad9464e52f600d3a462fe7fa6533424267ca5b9e7bbb5e752b47438e2f7bf91df102be1dc0d118df334ae7bad1bffe7a2962efdd"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f0000000580)={0x0, 0x22, 0xb, {[@main=@item_012={0x1, 0x0, 0xc, 'g'}, @main=@item_4={0x3, 0x0, 0xb, "1e37571d"}, @global, @main=@item_012={0x2, 0x0, 0xc, "8593"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x531}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000640)={0x40, 0x17, 0x65, "d937a062f20668582fb016a74d933e243b493c6f1c1aeaee841c23783876fb859e97139691c7b3ed11db75c246046325faa60de9ea748549e2af721e6d4ac5a0b4df6c00d5f22f6f2964f013755f555c9ee037a0d3f218556ce2d3eb4c6ae7282ea813c335"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0x20, 0x1, 0xdd, "8d92449ca6ff9aeda9afb0583e95eff8e9aa3ed0781cbc99a08aff4ec3ff24d4e8762de7cf63c91a48aa16e07fcb7e8c5e63406b52a467a2ac06f67130fc138415af223e7ba84271b8401d3121ad488a7ad6ff2b95a98bf193a60bdeac9d8c87fff4e1ba7b08d80bfcf2612cf2ce234bbc3339b148c7552ee4e3e20efd2679de1334cfe3e7a14931e1edf1eaaf687c759bfcb87f872e51d1b6d1ba7453e8d9ae0a0d9193d023b6f6264dd02b483029e386ef738b51f1d3e2be632e83aae8da4e34391cb88cb275cff7350d65b5497dd7e768d5735ff24c9289d08fec4d"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x2}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x1, 0x0, 0x0})
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x9, 0x3, "9149f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7b98740927311a6d9f3010203010902120001000000000904000000ffffff"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0xf, 0x78, {0x78, 0x30, "b39c1e85cbeb46884a3b5471ff92442d8c8fbef480918a84f443dd9c3fa12c8d85833802ff26f44056f446e06cbb94525b0292bb78193120cb49e532aac1894aceb018f5fa0a70f19b56eeec2c9ba832c08b7ac8d1192b61fd4174fe8ae5a7845236fd694f6cd01e86d8ed606b6386fdf8d73f4ab51e"}}, &(0x7f0000000140)={0x0, 0x3, 0x26, @string={0x26, 0x3, "25c7b0d98aaa42cf06bc22ee8c7d963283b3a37aad03ac063c27dda33806ec1d19b61b85"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x40, 0x30, 0x69, "e5a0dc29f244fe04e519e6077179679935e083408c2db22fbe0bc5af78c8b7d1cf17e96023e88972ec6dd9c6f780ad4b45fc2dfd0f4535051ddf3b25096d1d7a19d9632daa696d8449d7034d6cbc27afb54e5d166e995e71e46bc9bf197cb493d3504b1ff78cd8f0a2"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x81, 0x3, "c9f263"}, &(0x7f0000000380)={0x20, 0x82, 0x1, "a6"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "f51d"}, &(0x7f0000000580)={0x20, 0x84, 0x3, "a14d0f"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "b5a06a"}})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b000200"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0})
executing program 0:
syz_usb_connect(0xe, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9f, 0xe8, 0xe9, 0x40, 0x19d2, 0x1424, 0x2cef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x3, 0x8, 0x80, 0x1, "", [{{0x9, 0x4, 0x3e, 0x1, 0x1, 0xff, 0xff, 0xff, 0x1, [@hid_hid={0x9, 0x21, 0x80, 0x9, 0x1, {0x22, 0x54d}}, @uac_control={{0xa, 0x24, 0x1, 0xb48b, 0x34}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0xb, 0x40, "862312ee1e7d"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x4, 0x2, [0xa, 0x4], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x5, 0x2, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x3, 0x45, "52c3"}]}], [{{0x9, 0x5, 0x9, 0x4, 0x400, 0x7, 0xb, 0x9, [@generic={0x2, 0x1}]}}]}}]}}]}}, 0x0) (async)
syz_usb_connect(0xe, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9f, 0xe8, 0xe9, 0x40, 0x19d2, 0x1424, 0x2cef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x3, 0x8, 0x80, 0x1, "", [{{0x9, 0x4, 0x3e, 0x1, 0x1, 0xff, 0xff, 0xff, 0x1, [@hid_hid={0x9, 0x21, 0x80, 0x9, 0x1, {0x22, 0x54d}}, @uac_control={{0xa, 0x24, 0x1, 0xb48b, 0x34}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0xb, 0x40, "862312ee1e7d"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x4, 0x2, [0xa, 0x4], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x5, 0x2, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x3, 0x45, "52c3"}]}], [{{0x9, 0x5, 0x9, 0x4, 0x400, 0x7, 0xb, 0x9, [@generic={0x2, 0x1}]}}]}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x5, 0x48000)
syz_usb_connect(0x5, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0x14, 0xf7, 0x22, 0x8, 0x9c0, 0x201, 0xd985, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x81, 0x90, 0x98, "", [{{0x9, 0x4, 0x9b, 0x7, 0x0, 0x62, 0x6a, 0x5d, 0xe}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000"], 0x0)
executing program 3:
r0 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x10, 0x2f, 0xe}, {0x9, 0x5, 0x80, 0x2, 0x400, 0xe, 0x4, 0x7f}, {0x9, 0x5, 0x80, 0x3, 0x200, 0x2, 0x9, 0x4}}}}}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0x22, {0x22, 0x3, "b8e4c092c111ede2cfb8d81c0e28e9f7f2a9572bb58d29730fc5c32d09a232a4"}}, &(0x7f0000000080)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "b81ae31891c126d49ed48eda4f7911617d0ad4672eb5a53a7aa810c57e5da300a03e93251fef522e78bf202bb2eb5438b5e94fe945f0eea2545ba97900c2dca98ffe51b77552b4cbab36caf9c7db279d53fe680c3bce7b690d3d918c53aeb88711e7d4ab70377f964a0cb155247c0ab5d2105220e7584439cf36a4ffab976ebe5461db925a2be16435ee0fb73d8bdca27c012e6c0e94932eb4d478f1e2ad7afca6cf756cf20558d4d93d1cec5a73e9a58bcc1f480a77cb03916f6677d834cd3899e8afc131345198512cb802c88d11ae501f915f955b081f3d97e32acd591ef8da97a112b03ec69598eb8ad13a7b7f743ae50f"}}, &(0x7f0000000180)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "99dc23fa240e923274f2e85a5e0d1270"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x3, 0x1, 0x6, '@E\b=', "82a4b9ee"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x6, 0x55, 0x8, 0xf, 0x8000}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x8, 0x7e, "dbea24483b9e5fee2e7090433cf23322ee0b5df175363c9b8ae65efc0b94978dfb6f4039515a339cb491e9cf0bfbec6842042cc2c672c49a4d42ac69eb40e6ad91e9eb79d7cb3f3943f5daec636782d80d5b7200318e0a11337a3886096c092be3c82730c0d5e3ceead73ccec797664c54001d4449150c4f3ab191cb6c06"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x160, 0x20, [0xff0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, 'Q,'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfffa}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4604a546a095a5c4}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "7796"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xb4c8}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xe}})
r1 = syz_usb_connect(0x6, 0xb27, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0xc5, 0x9e, 0xc7, 0x10, 0x19d2, 0x86, 0x508e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb15, 0x3, 0x2, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0xfd, 0x6, 0x10, 0xff, 0xff, 0xff, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0xf5ea, 0xa}}, @uac_control={{0xa, 0x24, 0x1, 0x5, 0xa}}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0xa, 0xa, 0x4}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1, 0x3, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x8, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x42, 0xff, 0xc8, [@generic={0x35, 0x4, "b803e73a7d70efb9a0e34649473353cbeef02f4337016aa6d4bcee6d8f2fb9637a7e9bb5000d10d5a06dc54ce8e9c854442859"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x7, 0xae, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x101}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x2, 0x0, [@generic={0x30, 0xe, "604923a74141d8ed06efacb23a53be820ff5f8330c1bbfca155bbbcead05d648476f3ef178a5cb3fc0ae2a85779f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xc0, 0xdd, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0x3, 0xa, [@generic={0xe5, 0xe, "8e12ac9e86591e58f91c7e71d6f48daff56779fc4c28e75ae01595a6b104510e78feb52cc3253aeef69d5234fb2613841a01638cf3a11e4c07c337e1f64b9840f981b5863f0a8b5d6f8633009a2689abbb3f3806739be20ad23e43a8ab988ad9377d4e5734081d8ebd660f06e31b34cadd4f588d03203b91d231bef258845109afe289d49a97dd8983d47140d002cbf48ed3b9ec21ab17ad5f1c7acd6f349dd29077e2a95d8a9c324a85fa1069f9ffee6c35a3e2aacffb0d1a8824b67142e0de87749261ad96d5db6fb9e2f3cae6160366ffb6f0662e857a117ec861ac9b8b430d4a40"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x4, 0x98, 0x1, [@generic={0xda, 0x9, "dd8607cae6190631c3030aa70ea01dd689d721f9c11c20c71db28732ff346364cbd0cf3689f74e9941cbcaa31cf26972ef614326f1e993a3b4d465dd0b8f561f591898d74fbc97802ac2d6f9af995af5fae142b457a4ebe21a04c3b7d0f3e7471ed241e1dd5417db994ea8d26dd1d2dba0ce5f525c72f85228268d54db0a7f32f96daf91f34c03fc13eaeb3f1b6a26dab11f4e2cd01a87f7ccc9bb155a3025478c6cd23527786406845024affee8774a440317924b4910b50599aa561a853d0186aa45f9dbf24d62dde7beb508efd7adc875a88ea6053ad4"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3bf, 0x4, 0x2, 0x60}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0xa0, 0x0, 0x9}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x9, 0x0, 0x2, [@generic={0x69, 0x24, "393d434a58f7e3152693d6605c53cdf25312795318a8e453e04994010fdfb74ec85db478f2e52e6290da4f7b6bf8a8c0c978f2035a7870f613548bb381f5fa5686f6304ea6dc8b8dfd7ec8712b4aa6c89560e420e85359c5423604cf2fb03c3bf886d0157dceb2"}, @generic={0x36, 0x3, "7635b05309faad8014ed055e26ad7756171033449d9d7e2dfcfc4466bc584ce6795a823ab6789171f9c8a83e62155a3b20a961bf"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x5, 0x13, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x71b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x4, 0x8, 0xd, [@generic={0x58, 0xc, "740cb7bf54c220c4a49cc277a399778d3e3be047f9bb9f2298845acac8b1f2d1e68eecea2ca6152a8af717040fa5666ca5d23c1392b202b7f689107de2d691ea82290fe630a6d7c373c12a7ad06686931869c6916453"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf4, 0x5}]}}]}}, {{0x9, 0x4, 0x4a, 0x4, 0x4, 0x28, 0xd, 0x89, 0x0, [@hid_hid={0x9, 0x21, 0x94, 0x2, 0x1, {0x22, 0xf89}}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x0, 0x32, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xbe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0x8, 0xf9b3c019be5d24a2, 0x10, 0x6, 0xa2, 0x0, [@generic={0x4a, 0x8, "9a0ea97d8945c0ca8d2158527b78322fefc4d78557f4e9e7ff80789b9f8e20b015edb6f8af3ccabb425ce11e857448099b567161e10f42bb97203476693b66979ebeea54700a0869"}, @generic={0xad, 0x11, "7c7f41cb88b31d7880a8d7585bf07e8c08220e9ab9b9df595a9fca609304fa8278097c2bb1c3cf14b858842957d41877b6b21b93ae0c2a1e3fbb1bfe152b86924d1268bde70acfd7cb7b0ebc3333b34cfcb71e2527f4981ebd0789e2b66362420ea63ab74c297f36e73b6c06b2de976e3a9ac721c88e2368195481973d81245706b5a695a2447c25e518a2facc47ae6583d18cb334d40cb91f5913ef21a6f6602143b71cddc3e5b6903e17"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x6, 0xdd, 0x4, [@generic={0xf7, 0x23, "7c459d031a59fd9551c53d0c90ac86913124e3aedff00a0852b1563a4a4ddd728afb0df943a5cbe8d7d20d2efef500d99a7e2c24fdae29ea0da0e0318524f515bf1b0e4969eb28292f3ffc9a7820941b4f80c5a81146f71b39a2998600b69d7edd42d22e1d83a95d00a3842b3f825f108fbbc2c1f91bb2fc5a534dce00cd210fa3caf53f4ed28cf9e6b2abb494f6a67476768785abbb0d01e54f6bdd9ffde4e5ee24da30d30e4553e8693a8903b25f9a37c44e27cbd2e0d925f1bc35c7b9be047b26ff32387d13b3cde4f289c69fe9e449f380efda5ac96b049efa1d16430a3bdbe34628cee67a47b499d8edacd6dd47b964075509"}, @generic={0xa9, 0x21, "680180c9377dd0a287d4de6463ed431686b83642ae5ab6860e6fa94e3d38c703bb32a15bcc52919423cc69c95c04099de07a2a754c2b131a13c41176305449c80c9f7e63df3ff7b11e067c6686d20f204afc7b6db405f648ea63c3c9be60acaf66d68dca8b4a81ea6d2716a1aeeba2215627ff5fec848dc53eb720c63b091bc9fd6cb38099c32cdfd07e6b23231a6176fcdc9e8ee4967ef26b4a0ca1be0a07a51383af96851141"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x80, 0xa3, 0x4, [@generic={0xf0, 0x88804df5ec7eb9fa, "efd2604d4b0b16e3e3e73c0754df2fdca125bc7aebe59b6818a8e4727887728e80b080798519e1169b92514d1d618320a08acb434518e18186d0e42d32061bdf86c8e429c0073670cd1f141eacb9f7065db98ac5eb3c07ce618e8b92c78f02622d596dfa1c54e412e930557ada5ca7e129f033e79f1b2a7e3344234b4e325456ed01ba97c1074070d96cfe931133802b740e3e8cd478c00ab720504580b58906caf05936f808b1ae392a72f5767ac7f8e835f0ffc9b1fa6ce6c73390278ff3d4690711cad70732acbdc1da09ba8b0b0454a0856c129bba9d2dff691b947a4c9d5883273a2ed22f5c2d238737a74e"}]}}]}}, {{0x9, 0x4, 0xa, 0x3, 0x8, 0xd9, 0x45, 0x82, 0x7, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x7, 0x7, [@generic={0xeb, 0xa, "db91361c63ee625c23edc463f2745ed6de6c20ae655e733dbb466fa197a106cabda9a33d2add7cdc2fa952a3c50658f7d8144d81a32d3b2e36a2059d28d27a9eea8f245873a9352f88be3be955fecb2dfc7f439c7835f7382a3ab717cfc28ef67fced5c6112f597f32d43c0e1012ab22deb9f26abc188b3ebd407bf4d27275976d6e8b95f7c316271ac13d2ec0efcef3c1ceceab8cd853d5043fce4d3e5e40d7cc0186166a293ffe267f00dbf8a29dc0471e3214b0483ae771a36fe0e1852011de1374ea81e78050bf9376e9cddf5d38ad4a08eafec7f95d7add1790af4d48fcf5dd5706dc80774824"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x404, 0x10, 0x5, 0xf}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x8e, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x4}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x5, 0x1, 0xff, [@generic={0x9d, 0x4, "a8a69d1b2ac44ffc0cdd549aa18b6a7cf426f9508034cbe589a94cd0f54ff231201a3bc8c7e0bd65be349448279b052101bc346eb68654bd316ba34c292bf6f4ad48d9c9d6b888abc0dea203f215064c86ed5201bffaa88a07e0e4bc69836864029da43fe20779a796a44f0c072a1541e52ace56d08d7be42eeb82efd257b09cc9b35d2ca887a359115616fddd215d1ac330c9f2ff18da88016bf4"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x8, 0x2, 0x0, [@generic={0x76, 0x2, "0c2f62c4eb21123ae38744c33adf5a7ea9d64af6f7bb85504244d6a80f2e99dde7752caf8da6b5678b0c939523c0b34fc5cf5b651b95cfd255425f23a53bfb03593a48c5f78806408458a57e71990d069ff627404966f2859e127a7d6d1b2a540b197f6df9b66453a3c592a2cec17defb164b7b4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0xc5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x0, 0x6, 0xff, [@generic={0x25, 0x23, "0ea4ab38772932d049301736dd7ee664f28e6b4701e1426c4139800f8ca1642fc77a91"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xb, 0x41, 0x3, [@generic={0x5f, 0x2, "49d2855ed6a42095da48e3c96effe3359874a775d7aada15514eeac22fc3c616e28ff1db58e1d97eb12835c01dbfccc3138e22cbb75c0bef39cd3a2b1489892869745c1b8f5524b9f2ae585260f9b00522583b6c61a039650c33f4b113"}, @generic={0x44, 0x5, "1f6d846f71696557b7c4c63e53ac834673f47f3f1a2b9cb122d94614ceeca52c7a8094516628908bf08f6eadea0c894bd8bac98c60f67b4bbbdd5a315e032340d774"}]}}, {{0x9, 0x5, 0x9, 0x16, 0x20, 0x7, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}]}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x200, 0x4, 0x8, 0xf8, 0x10, 0xea}, 0x87, &(0x7f0000001340)={0x5, 0xf, 0x87, 0x4, [@generic={0x57, 0x10, 0x2, "9ba76bd9f185fd8bd587fb736c111a8b21c3def16b905dcf891457a1f17c56ca8e383e06f5a3b3b71b53d1548a1170bde45b138a78ec557367680df06fbb88b525e5d2185c3bc3b024db19c08adccbfb0a89b075"}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0xa, 0xf, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x4, 0xff00, 0x62ed, [0x0, 0x3ff0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x2, 0x3, 0x6cc, 0x5}]}, 0x8, [{0xda, &(0x7f0000001400)=@string={0xda, 0x3, "5c1265f32aa700be43796dc614fa90b9fc04ccaccafdaf674557b489a5dff8bca22689b75fb323ed3000ca559da56fc6a7c313c637721d876c9231395b57e68f3e320c5f35108adaedef06348358852faf9b4935d6fc42468b8707b29199a40d717cd860d4c6aa0dc3b4d0d453cc9394aeb9acae2b34a5e610d6c3fa93fd4355d4392a88985b7d47bfd1136d8b3a2d68aa4c0c8ec1206c3f66b9212b52a5e0c3530c779f5eca58f99e72971521cbd1826dbaf5848240a6e37201b3842909126ae9a71f5b8a550970b05bcf0668305688cb44137f987c92cb"}}, {0x8d, &(0x7f0000001500)=@string={0x8d, 0x3, "42b401959a4672dee79b0d8e65a4e4f3bb23e09c29cd1ed569ab9f1662688c7e730a37e386e5c9b02b25f1d2e4ab0540856627e9d85e21d185d95ec266b9443a15db745a97b82eaf488d6912b2f0ca8d987c6254e69422c87088bf89e37c786fc615d8c9453aeebdf646ea467999ac2b01df4a547fc6d2fdfd0d180ae18f8a5c90e1cfe9d91c820f1c7e4d"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x437}}, {0x53, &(0x7f0000001600)=@string={0x53, 0x3, "744de478c37226c30afd1892143c33b79dbc26fed3e781b789700b44ba666b60c52f03346fcdbd5de9f487ad9979c5d82e519f12d7cfc389ab3faa46d240aad705d79cd04d9c522ab269f31f5b93de77da"}}, {0x55, &(0x7f0000001680)=@string={0x55, 0x3, "c7751bec36fa8226715d45405c6e65ab730cf4e282f0e165963f1e0948f170959bd2a265a660015a742c4eb6496341ec477c7f7ba8edb2c19722e55c437f92c34567b8ad3a035ef6455f35b1c8a01360371376"}}, {0x42, &(0x7f0000001700)=@string={0x42, 0x3, "d67cea2516d2905cd804778aca40116415b1d98a692a70c783b12cae5309097e51e2b7b9999a45fb9be15a3041810b32a265f665c4bca24a72ff5586f2f43b5d"}}, {0x79, &(0x7f0000001780)=@string={0x79, 0x3, "bc519277a7a384ed49ded4b585e680be84c4a46b902d1a6993b3bf4f950a2871d2a9c43d7b61af6cdf3ad850f9ee0fd9ae6b6618bb12e0569a83ec73ca96d5badd225ed4f1e0417ab65c34c3faaf2a94e69d5fd7761a44e4b7b74e180aabcc81a994016c277d7ffc87cd15408ca20e857cdaf593c10818"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0xc09}}]}) (async)
r2 = syz_usb_connect$uac3(0x4, 0x106, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0x40, 0x60, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x27, 0x5}, [@processing_unit={0x1d, 0x24, 0x9, 0x2, 0x5, [0x3, 0x3, 0x25dc56c05867d5ea, 0x3, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0xb2, 0x3, "75535c7fb74b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x1, 0x96, 0x8, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xae, 0x8, {0xa, 0x25, 0x25, 0x5, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x2, 0x3, 0x6, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x9, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xf2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x2, "c691", "39e4"}, @as_header={0x17, 0x24, 0x1, 0xb, 0x819, 0x4, 0x3, 0x0, 0x89, 0x9, 0x6}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x9, 0x40, "f43e5531ccfba0f7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x4, 0x2, {0xa, 0x25, 0x25, 0x7, 0x4}}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x0, 0x7, 0x7, 0x9, 0x8, 0xe}, 0x126, &(0x7f0000001a40)={0x5, 0xf, 0x126, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x7b, 0x2, 0x81, 0x9, 0xc}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4c, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xe6, 0x8, 0x3, 0x6}, @generic={0xfe, 0x10, 0xb, "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"}]}, 0xa, [{0x29, &(0x7f0000001b80)=@string={0x29, 0x3, "bffb79a42ae60d99756f2f6e658173ed2493944179bffc6802db6050c122e8b3ed3923c2a0f1c8"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x437}}, {0x102, &(0x7f0000001cc0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x89, &(0x7f0000001e40)=@string={0x89, 0x3, "ee6335ca066ab677ee705e67a9d8cf6c5dd237793593388e95c773b85b780746f555d5e79bd898372f5cdbd9ec100ba4c6a7af5dbb26d628735ddfcc0df9519c7c9bbf5101dca86a03257040e71634e3b86acb95a36315977a597ccdad6f186272977d9896ad2b450e241e46545e149e7f4d8c8aaaf95b9a0230b7acef01db8ff7328513edc549"}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x41c}}, {0xd7, &(0x7f0000001f40)=@string={0xd7, 0x3, "f0e8b215d3d55b58383ea7d5a93c84dc83d76a2137fe4f56cbfbb15afbb6d8b75016f5051fe120ad31246071bdfab36543c9cac3c7e4d012467cb664f1cd3b3456cb04018764071cce0c1fb8c68e691b8531e8b1aa380d91e16b85455207569299d40885e0bb42e6e90f1835825adb3c57606275cb2f579712ed1ce8c7d347194942647cd9e5e653f2d154cd6c64add79233e2386e98de56e95c6b49b12b0896479dbc781124133ead87b40737cf4b73ceb72e02ebf059f4afb29a6a0b3ee8f7ccf029506f63fe5f475a6324e33974471a19676e8f"}}]})
syz_usb_control_io$uac3(r1, &(0x7f0000002180)={0x14, &(0x7f0000002100)={0x20, 0x3, 0x36, {0x36, 0x24, "a9a9a2f7b52862b6155f7c2e5389a5e9d864fa19492f0663e4ee8b1445d42407004d7669f886af5130c93fdaea823a21e95084eb"}}, &(0x7f0000002140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f0000002400)={0x44, &(0x7f00000021c0)={0x20, 0x8, 0x71, "595fa9ebff6166455827a972928b9a419e6d9b81681a2775b1ad8f6000b9d4698ae030955057cbd6771275c8abfd3bee4ce2919159ee92c137152b4c0d09c36e6a1433188cbf235cc12ba8f138076edecf7feb521d48044c1c82c3b3c8f9340e1ba2d63a880775fce3e16f3329902176f2"}, &(0x7f0000002240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002280)={0x0, 0x8, 0x1, 0xeb}, &(0x7f00000022c0)={0x20, 0x81, 0x1, "a4"}, &(0x7f0000002300)={0x20, 0x82, 0x1, "bd"}, &(0x7f0000002340)={0x20, 0x83, 0x2, "f30d"}, &(0x7f0000002380)={0x20, 0x84, 0x3, "d25ae0"}, &(0x7f00000023c0)={0x20, 0x85, 0x3, "c7f033"}}) (async)
r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x20, 0x7, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x20, 0x5, 0xf0, 0xd}, {0x9, 0x5, 0x80, 0x3, 0x20, 0x9, 0xfa, 0x3}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000002540)={0x14, &(0x7f00000024c0)={0x20, 0xb, 0x27, {0x27, 0x21, "4d6f34b30aaab39a7a7a36fe1a1031871fb1543d7580aeef5464093c3eb0ed624a51cd4fa6"}}, &(0x7f0000002500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000002840)={0x44, &(0x7f0000002580)={0x0, 0x17, 0xc0, "759d0a08bc29b233def7df718f35a33ee20de20642a2349b84ecd9814f211b28a17b7956634f934d8a88e4c01407de4f67b48530e7b40fc7d0339236aa2c56ee87ab2faa7ab2aa4e0c196b04054dd06475c045c65413eb60264e34c6adb1c62e1cbe9f973e189edfa3891c38da7bfc36e988a2a9f776aff33a2d072f19830ae4f34cac145ee4200983723a29387d6b0d95ca8d356e4ccbab959b7c12cc485b57b850ce925f00d15a660a79104f7007331e40dc6505f40220f55dc33dcb49df48"}, &(0x7f0000002680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002700)={0x20, 0x81, 0x2, "f800"}, &(0x7f0000002740)={0x20, 0x82, 0x3, '3xS'}, &(0x7f0000002780)={0x20, 0x83, 0x1, '#'}, &(0x7f00000027c0)={0x20, 0x84, 0x1, "bf"}, &(0x7f0000002800)={0x20, 0x85, 0x3, "8308b7"}}) (async)
syz_usb_control_io$printer(r1, &(0x7f00000029c0)={0x14, &(0x7f00000028c0)={0x20, 0xa, 0xb1, {0xb1, 0x5, "13c934e35425fa04c6134e1f04e27416895b1fde5846b6e75d4db074997d48e10fd01cec0601f700ceab89a1354ec0ee30c3e3dbdfaf968c19531712b1c11f3397a158292125f8e241813b95b4f319e5c6dd6699d88e61c7797955aec8b3a52493d6b243973913ca3389e1e4b8d4a55aba75192b909234be5d6b691219c41fe93d5da5b5964d9cf8f3809143ec22674c8fc4a95721f0e7afd7438b88d887d68c0e9e057562dae6280f4b8aebe10f9f"}}, &(0x7f0000002980)={0x0, 0x3, 0x13, @string={0x13, 0x3, "069e222aee47249c2ebccc5c73b8170063"}}}, &(0x7f0000002cc0)={0x34, &(0x7f0000002a00)={0x20, 0x10, 0xe7, "66f46024477ce859823ee54e30ede39e2e217e3c373b731c73186d333ab583a4a1fc598d4139f802227df9ab42c4ad399bb1990bb4f8798632901d8061b4fcdf4f608813cb70a63c341b5762ec6582d7cb549162f16a82d7c7e773b38e79682f8271297c81a5f0220f93de73fead507b15b02a86d238ffdd23da7487b45d966f3809643065ec3eb71f459d711ccb19a4d5460a68c405055b8638b50a55d9bf17c28cc5e65a2ef3d4055b3b1b2439a745fdfdeba599120dc41fef4300782fb00e9038ec417af2e67b2bc0ed67d4119b9cde145c263eb7144d04d04f2c9bc1ec35ed3a3b108bac57"}, &(0x7f0000002b00)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000002b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002b80)={0x20, 0x0, 0xa4, {0xa2, "60d8d0c64626327b50ade61f2f7c8ca40d7b716a9fbcf6b47a678ea01e98a1b38a7e241073539bfc987839aa334a8492932b6d41abcc330c10e9af1b0ca9fe486d1643fee2ff9f45e4a3975fee65559341bfd1d3d33c0f0cccb761eaeca901c371ed9b2d4c8bda4087f5871f77d180e1f24159416ae73797319fa0658fa7cdebd51b985eed9f9da89bc4ca3cdf3ff37c73f67f0b46392ac727ca528d2f5e352bff8c"}}, &(0x7f0000002c40)={0x20, 0x1, 0x1}, &(0x7f0000002c80)={0x20, 0x0, 0x1, 0x1}}) (async)
syz_usb_control_io$uac2(r1, &(0x7f0000002d80)={0x14, &(0x7f0000002d00)={0x0, 0xc, 0x25, {0x25, 0x21, "0954fc8b21ddad8232b26625d7d1b162340fd10838b25ee423bb742110e0b3064c9bef"}}, &(0x7f0000002d40)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "eeb83069fbcc84f4512e989f7984734fdabf363810c2fe2879e2b304913cb673a0778acaeae98a650f70d9"}}}, &(0x7f0000003080)={0x44, &(0x7f0000002dc0)={0x0, 0x15, 0xc0, "09857924bfaf91064879f71507fc984adfaa9a9eee9c841a7394de1e174e514ad7f52e18f0b6ba2fd3ed8f91b372baaf5b12fdfca3fa68898edeb8ff4a2fe568adf32732acc10e3426ea1df32c807c7c79bddeb517065baf0cf4fe6659c675a59dba3bd39cfaf3d0e1c5eef898920930634ae23775644894386c03a5879d8ba8ed26a6762bdaa0facfdb6734a72e851377097df28d15907e2bd1f8199d43d3447754952c4e2d460f61d84ce91053ada8a959cf123b4b6380bb319089ff4b5865"}, &(0x7f0000002ec0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002f40)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000002f80)={0x20, 0x82, 0x3, "c4483f"}, &(0x7f0000002fc0)={0x20, 0x83, 0x2, "13b7"}, &(0x7f0000003000)={0x20, 0x84, 0x2, "ce10"}, &(0x7f0000003040)={0x20, 0x85, 0x3, "6bcd7d"}})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000003180)={0x14, &(0x7f0000003100)={0x20, 0x21, 0xc, {0xc, 0x0, "0395bf7e6a2e4fbde7be"}}, &(0x7f0000003140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003480)={0x44, &(0x7f00000031c0)={0x20, 0x0, 0xd0, "d0be5cc6fbe65629330ccce087d82aac10c7cac0e8489a6e7988c15ada3c2e97d44e34c56058f998ed2babc0e31bd377f52d9c59296ae9ecdb1c285ab6d3cb5ab0e7b16841049fd317781236185f4b50e042a01f6ba70493a8b2ada4eaefa9a4f1184edc32f67b91a87548ee799663c99e287a2cd4795bda9ab4b9de07601884a1be40c90362f4ba6054feff051105e610601e13525b082a0bdba9f43692ddd413fb36f3e447fdf34b51451d9a4e1b8b57fd2e270f944684822ce796d29741fa18eed0ee4ab78dc0d877f99dc3f2d600"}, &(0x7f00000032c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000003300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003340)={0x20, 0x80, 0x1c, {0x6, 0x6, 0x1, 0x3, 0x7, 0x6, 0x1, 0x2, 0xff, 0xc4d7}}, &(0x7f0000003380)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f00000033c0)={0x20, 0x83, 0x2}, &(0x7f0000003400)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000003440)={0x20, 0x89, 0x2, 0x1}}) (async)
r4 = syz_open_dev$evdev(&(0x7f0000003500), 0x2, 0x145500)
ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000003540)=""/179) (async)
r5 = syz_usb_connect(0x0, 0x52b, &(0x7f0000003600)={{0x12, 0x1, 0x250, 0x89, 0xff, 0x6b, 0x10, 0x2100, 0x9e5a, 0x1d7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x519, 0x4, 0x4, 0x2, 0x10, 0x8, "", [{{0x9, 0x4, 0x8f, 0xfc, 0xa, 0x21, 0x7, 0x50, 0x6, [@generic={0xb, 0x22, "5e846c19d0adc8c616"}, @uac_control={{0xa, 0x24, 0x1, 0xf, 0xa}}], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x2b, 0x2, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x56, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x36, 0x7}, @generic={0x9e, 0x11, "85763ccdef962f439bb79ca669739f441a8ba7ff98987719f7546539971d896a250984edc769f84128e68783b8de34e5f467dc6fd0731e705d476fa39bc54d59089a81ee85353b358fffefdaacc567d0f57fa29b894e61f52d8f350a07d02872d82cf9bb02c3387d27aca30838893d9e56997b566166ecf41af3d60ae35ff03ae0b0e992bf56231e345cf41d399458f6e945544b14635c4ef69324ca"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x80, 0x3, 0x6}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x7, 0x80, 0x5b, [@generic={0xae, 0xd, "19e356fc388064081b4e193ed431617c70795b5b7e1400bfc5969eccb061807ec12163849378f1255293ca104e9f6fafd56571e184b6cd7c77690c4314b99afe237053f85b2f928c5da7001390c47bd4af785e561040d8fd610effbd7ec6b2a31711e2329aecfca7d5c8e8c52b9207b54e9410ce14f1e5d1f56571c901ab54521be8e5fc5b3b9eb7ea06d9696d2fef92da4fe59a77fc03f82428c6471323635bd67e0bb8fdf67800f8c921c3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x40, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x200}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x2, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xc3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x5d, 0x1}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x1, 0x4, 0x0, [@generic={0xd2, 0x22, "09e68dadac432a56a6355693fdd593dd306e2ca5aab659252f25435b2b6dda9a85951eefbf3d2a642a253eb9b91a5202b94fca368e57518463328601dd4cd8ca0b12d55a6421d911cbb4df3458801c6582383359b8c637eed029c3a6738b5b9880c761eef6b0f822592cad97994311fc3fc2db933afaf9771ecffe7688902f6c467d0e07fe1387c29bc5cae6afbf3312d869c84a5b3959f37747363be5ad0f74fe5c63b9db45bddefa329ad25c90e890b8d711338d070fcae7b0a8d328488918c5e9a78c8b24fd020b27d7e6ab8288ac"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xf3, 0x39, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x0, 0x2, 0x3, [@generic={0xe, 0xc, "ec81758cd316afb2ef7be993"}]}}]}}, {{0x9, 0x4, 0x2e, 0x3, 0xa, 0xd3, 0x67, 0xc6, 0x77, [@hid_hid={0x9, 0x21, 0x8001, 0x5, 0x1, {0x22, 0x6b9}}, @uac_control={{0xa, 0x24, 0x1, 0xfffa, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x400, 0x2, 0x4, 0x8}]}], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0xfc, 0xc0, 0x2, [@generic={0x4c, 0x21, "76557615af8026bc370bfc928f916e5cbc4f4dc541f4e2a38774f725847cf39718641ff4b1ea9dcce733cdea5e89fcec558bbfe29f873d2da03ad8cdc73d43dc64dcb7f6e6302b9b9b51"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x5, 0x2, [@generic={0x5f, 0x7, "bd1af1d7c8465e3e04ea0b5768c603cbdcc7c0ad332ac1900201157c4cb5815a3d688d2960f041e5296bdf10c7abc03ac081cd4f8e2139f89a354ff418de529dd667e7bbe062c3327182edd9dc29502d9de5567b651985058451e41666"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x7b3df21d6c02b2c6, 0x9, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xa7, 0xbb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4a, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x2, 0x7, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xf2, 0xe, 0x4}}, {{0x9, 0x5, 0x8, 0x80144276c56a41b3, 0x10, 0xc3, 0x85, 0x2, [@generic={0xd8, 0x10, "8d4c9902b5dfd4dfe2a3b77aae25a5aa9e6966eb60d59bf2ceb5288729ad6d74cee61505a5afeae9c7c243c27f6b5fd874dba9868b02e78e261da339eefea6fdb0e4e7685bfb4c0249ffac557a2325f97f67d51547445d63799a6eb0c6fcb7aad92e20fe70e559b5994391232b34ceabb504419bcff9dbee9f6388587334d7f092ee23b7716d81e2b2ee1420b8cd4745a7ba79de1f993d7975ec9905d01d3b2af26840d35bbd61fed03e44dc6da74ffb86cda3a03150381d3b5bef3f561ecc639b497097a95b0eb79769278b45b516c7a819c79c3b08"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x17f, 0x7, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x9, 0x94}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x5, 0xff, 0xa, [@generic={0x10, 0x23, "cc9ade3f8c271cc4f72f06bc87c2"}]}}]}}, {{0x9, 0x4, 0x2b, 0x1, 0x0, 0xe, 0x1, 0x0, 0x9}}, {{0x9, 0x4, 0xa2, 0x65, 0x1, 0x86, 0xbb, 0x57, 0xc, [], [{{0x9, 0x5, 0x8, 0x1, 0x10, 0xfc, 0xd4, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x2}]}}]}}]}}]}}, &(0x7f0000003e40)={0xa, &(0x7f0000003b40)={0xa, 0x6, 0x310, 0xfc, 0x40, 0x9, 0x20, 0x2}, 0xf8, &(0x7f0000003b80)={0x5, 0xf, 0xf8, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "b8f16e20bd9304e7b28efabc8734992d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x0, 0x8}, @generic={0xd8, 0x10, 0x1, "fc32538022cff3fa196441bd0b1eab6cff604082b0684b8950fb31b88dca2e2a49ac5c9ad4faba21f442c2f4dd5d068efde2eecdd9c11f79d704e59e2a7a457a218946fb87faa1179ec81865b06168abd7fe9d8ecf3161c1a9c584fd4a96421978e81d2eafd98d745bea77b9431d628e9629850303c95dd9a8f55d27dc4a173e7bacc6005617a85f028a09f15e554bc9f83555b01a39377291e3b504659874bbb34048a8021402952863293b18b4be04ce85774e46c5c2f93463e1d75af99e35e90b58ac4b65d60e46f6eaf425b18e0ac9e67a6ef1"}]}, 0x5, [{0x21, &(0x7f0000003c80)=@string={0x21, 0x3, "3ecefdcedbc80c8e8ab4552e2b0dbf51d589d192df4a6d90d60c36e8818911"}}, {0x28, &(0x7f0000003cc0)=@string={0x28, 0x3, "869729dbbe20b33cd2b4410194ad7818f87beba482aa0ab805e636120ea2f7700eb83d9fb034"}}, {0x1e, &(0x7f0000003d00)=@string={0x1e, 0x3, "65599a1cc5b301cdfea958385d1fd2e912c132fe3df5835ffd18adf8"}}, {0xae, &(0x7f0000003d40)=@string={0xae, 0x3, "ba919026d486ac91173b20f445e002a8c84e5861b81be3a91747c19dcf2d5c7b4a8dcd8638c3a5d8f8a4a00060b5df2c4447eeeafc6cd6b6ad1fc7c18ddf647d20f2a945fbdbd7ca5ab50de0d6859a8542d2e17edcf2b81f710c3534110dc76a0884fea4fc006d1578afeb6c047eba89a464b84c428b20a35943c4726b5511407f991e51250269fa9a40622303b4bebad28f28ad0cb4a0d193a7f46836937192708f5e7c4078ba0962f17b84"}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x419}}]})
syz_usb_control_io(r5, &(0x7f0000004040)={0x2c, &(0x7f0000003ec0)={0x40, 0xa, 0x72, {0x72, 0x22, "24513e2e49abd8f7a447ac234866e03d90c4fb316661df5df9bc8673e050099966e9b844a4cd46ed2137b62e8b2307da2cb4e62e1a0eaa21bfb4e7fac460185c66597f924aedca5e140915bbf7d0e51f3fadf35fc2f4a278d30aa14e7de7df5ba38f6e3e419991c503a79b3823668522"}}, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000003f80)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0x6, 0x10}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2a, 0x9, 0x4, 0x5, 0x1}]}}, &(0x7f0000003fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0xd, 0x80, "1a8fe48e", "39c5dc54"}}, &(0x7f0000004000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0x7, 0xfd, 0xce, 0x4e62}}}, &(0x7f0000004500)={0x84, &(0x7f0000004080)={0x40, 0x31, 0xa4, "183f0293d470139cfbe4b3f072557f728ed6fa787ae458869cf516590e4881ceafcf27060fab5cd7bf9f340144bc3062ab58097c9db80d9ae6a337a8652fb8af25da6ef99ee3c898e6517f94deb5390509df440146dd7350881da9df35457f9537c10caa12173a0e72499c048148664e8e05f3a83984a78fb0403c243a52dc528225ffdbc2be174165529d16a71b3abbbcacc4b2b822be436ee52f7d7fded32bc60fac38"}, &(0x7f0000004140)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000004180)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000041c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000004200)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000004240)={0x40, 0x7, 0x2, 0x240}, &(0x7f0000004280)={0x40, 0x9, 0x1, 0x34}, &(0x7f00000042c0)={0x40, 0xb, 0x2, "e21f"}, &(0x7f0000004300)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000004340)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004380)={0x40, 0x17, 0x6}, &(0x7f00000043c0)={0x40, 0x19, 0x2, "b7c8"}, &(0x7f0000004400)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000004440)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000004480)={0x40, 0x1e, 0x1, 0xa4}, &(0x7f00000044c0)={0x40, 0x21, 0x1, 0x68}}) (async)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000045c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r6, &(0x7f0000004800)={0x2c, &(0x7f0000004640)={0x0, 0x5, 0x50, {0x50, 0x6, "86ab39c2094bc9304e10a0097765d26e414f362ea8c4ca4db25ef1d772c079e92f4d9bacc62c952ceaf0cd577c35c4c2e514853fcb203d8d57462641fc4e4852660c049fdd2721fb2d07834e5bf1"}}, &(0x7f00000046c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000004700)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0xc, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x7, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c10ecbe5393a5c8b5057ace886db71f5"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3a6d8671967d8bacd0537235f5aa6a3e"}]}}, &(0x7f0000004780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x10, 0x3, "270d7491", "0a2d66d8"}}, &(0x7f00000047c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x2, 0x6, 0x2, 0x0, 0x9}}}, &(0x7f0000004c80)={0x84, &(0x7f0000004840)={0x0, 0xe, 0x77, "aac02e6c9e7deba04fff5fa3bfdb809cb0b92387b93a6d388fa4d50215bf4acba3a87d3d24b4704900967362aa31f3336222ac86f8384f262c05ebc8f4bfe1168ac0718f9b0357a4a8a751cf03c41139c4ca59a493373cfe81cc7c7494c8c39b525c20bc25f5c8802fbb4f3bd98082ac394a2b8fb406c1"}, &(0x7f00000048c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000004940)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000004980)={0x20, 0x0, 0x8, {0x1e0, 0x20, [0xf0f0]}}, &(0x7f00000049c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000004a00)={0x40, 0x9, 0x1, 0x6c}, &(0x7f0000004a40)={0x40, 0xb, 0x2, "bc7c"}, &(0x7f0000004a80)={0x40, 0xf, 0x2, 0xe9}, &(0x7f0000004ac0)={0x40, 0x13, 0x6, @local}, &(0x7f0000004b00)={0x40, 0x17, 0x6}, &(0x7f0000004b40)={0x40, 0x19, 0x2, '|]'}, &(0x7f0000004b80)={0x40, 0x1a, 0x2, 0x966}, &(0x7f0000004bc0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000004c00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000004c40)={0x40, 0x21, 0x1, 0x3}}) (async)
syz_usb_connect$cdc_ecm(0x4, 0x8a, &(0x7f0000004d40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x98, 0x80, 0xe, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "1223"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x56, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @country_functional={0x8, 0x24, 0x7, 0xff, 0x0, [0xf580]}, @ncm={0x6, 0x24, 0x1a, 0xfff7, 0x31}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xb}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x263}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x66, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd9, 0x4, 0x43}}}}}]}}]}}, &(0x7f0000004ec0)={0xa, &(0x7f0000004e00)={0xa, 0x6, 0x201, 0x6, 0x9, 0x1, 0x0, 0x5}, 0x1d, &(0x7f0000004e40)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x98, 0x81, 0xd8, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x4, 0x6}]}, 0x1, [{0x25, &(0x7f0000004e80)=@string={0x25, 0x3, "d81ab39c7e03e38fc6a8c83880c1d4902962365afe0ac593d146da877610edd889627e"}}]}) (async)
syz_usb_control_io$uac1(r5, &(0x7f0000004fc0)={0x14, &(0x7f0000004f00)={0x40, 0x26, 0x53, {0x53, 0x31, "53ad31affcc9490a44fce09f75357fb55c04794c40a9fc1481460fb80eafa21e46fd67f7a063ab9e6da82c62b83ca64a24c54f5a58f1a20ff8d021b5f16ebe7132eea3930a7ed2bcf77a14275353d07637"}}, &(0x7f0000004f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f00000052c0)={0x44, &(0x7f0000005000)={0x0, 0x10, 0xcc, "a6bdb15bb0b1c746c9510def123db3801c1281d0b244573d132dcd936ca49727e3919c33c8cf0857208f40d67ca6b7f684474a435a2068a8d6383c34372ab3e41c5dc81ac84c4f99690c4ef5fdb99bbc12b8f5e617fc14c904855f397dc3459a14aa0662b19fc2bedbc6040d5f193198703bca0f8b1b99a6275a35412f5be0da6e973c4ff04742545af40b046c8527555069e290d3ec368bb08794b84899aef8e5a175f475abcc8309def4ffaeee9b0cb094250f83cf96b03d9c4b665be88c91b96ea505da4fa311ad2719e7"}, &(0x7f0000005100)={0x0, 0xa, 0x1, 0x93}, &(0x7f0000005140)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000005180)={0x20, 0x81, 0x3, 'NIs'}, &(0x7f00000051c0)={0x20, 0x82, 0x3, "3f7f63"}, &(0x7f0000005200)={0x20, 0x83, 0x2, "7cb5"}, &(0x7f0000005240)={0x20, 0x84, 0x1, "02"}, &(0x7f0000005280)={0x20, 0x85, 0x3, "d8176d"}}) (async)
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000005400)={0x14, &(0x7f0000005340)={0x0, 0x24, 0x79, {0x79, 0xe, "c00de330ee7f0abd3dda56e7518bcf462eea9a6cd058fa1d427da464163f82c18c6148a1031f97cffbdb0d3752235e6508666e4adcdb78bd50bcb0ace96a29674d37b238041bcb115033d9fec9a0c07cd5d0d7ac90a1992753eb5aab309fbda040ef1f8d790f1a2c9ccc2f433638c23caacbf5ac59b3be"}}, &(0x7f00000053c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005640)={0x44, &(0x7f0000005440)={0x20, 0x12, 0x5, "02cc905f68"}, &(0x7f0000005480)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000054c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000005500)={0x20, 0x80, 0x1c, {0x2, 0xa, 0x4, 0x2, 0x2, 0xc29a, 0x3, 0xc46, 0x9, 0x3, 0x1ff, 0x3e3}}, &(0x7f0000005540)={0x20, 0x85, 0x4, 0x2d}, &(0x7f0000005580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000055c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000005600)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$sierra_net(r3, &(0x7f00000057c0)={0x14, &(0x7f00000056c0)={0x0, 0xa, 0xa9, {0xa9, 0x71940cdbbe9cba2b, "e9c0d6882237d336fdd6b3b49b72795639d754ba15a856158ebcb8087c2afe99971f25636d5e441bdb2f93000345f32e08c5d14fec7f9a5304d313e3047a230d3dbe7bceeb4864688da8980faece508bc1e49251768d7993e2a452a12de98debe96d3f927443910074dcdc2a35fa040efa0c3153583007ea6031f1ee96a7b237a1ffbf17444517dfa18f4f3a2e061a229ef8ef27105780f4d1d18c2d4ce488913a187c30ab4419"}}, &(0x7f0000005780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000005d80)={0x1c, &(0x7f0000005800)={0x40, 0xb, 0xf5, "7ca2e7089742892185da0f2be34f080fd2f22f460703cc65ba15776f6cae178016e94259fd7df10e57e0eaae88de958efa4da9773706573d2b1340da0fb2ad70a9248cdc2a7f301d550b77d502f6c31fcb00019347bf40cf40eaa8252558422daecb2148f0c6317437dba9d94d30fc026a663698cb89cc89673215d0f530dce913c3ee834fb16be31bb8a1774fe082ee6e7fb35d754150bb62e0e52acb25f4eef13a13ce6520879cf2c9a39aecde9c48129d7e09614a3ba61eec7bdf6df94eac8f152f50c5165f2de52f1df9f083c030089e7f3841d98a8c596b48e403b81f91afddb43d2146be6a27325d491abc9e9cc73986ffa3"}, &(0x7f0000005900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000005d40)={0x21, 0x0, 0x1, "18"}}) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000005dc0)=@conn_svc_rsp={0x0, 0x0, 0xa, "03fcf59e", {0x3, 0x102, 0x0, 0x1, 0x8, 0x0, 0x7}}) (async)
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000005ec0)={0x14, &(0x7f0000005e00)={0x40, 0x11, 0x3d, {0x3d, 0xd, "daeb7f25474aabe944d01a4bf2913b02853f683a50b15fc769721d12e6b67cc97efd5ca83defc4ea94e9fe99f28e31ff42ce0d7a6726a579f8ca7f"}}, &(0x7f0000005e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000061c0)={0x44, &(0x7f0000005f00)={0x40, 0x7, 0xe3, "6c2a619d49fe00d29aabe6ea71606d973098bfbc9955c318786c917c768fca0c4fac0d91bb7e92bd14e560136727f810d489ca3e68c5b948c5e747399dd06a3ba98aa5c28b8945aebc169c9a0f3abf760147ab44abb1c35f307f2cbacb13e7655b3bde407398c8cbae603808cd0279f9ddd2d39f91038323b45571db6e6957d05a378e3a22de5d661a13ccc60536fefa596f7b260e9ec5f6954cfdf4272c4286db0808de31f3dc4e745ac8bbfa800846c7dca827fd2a4fe9c1789c7e99e1b416a62e0506fa97f64d6cd8487f736cefd62606c988f15090f06bfce7ba4eab3010375b40"}, &(0x7f0000006000)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000006040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000006080)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x400, 0xfffe, 0x7ff, 0x40, 0x6, 0x8001, 0x9, 0x8, 0x200, 0x200}}, &(0x7f00000060c0)={0x20, 0x85, 0x4, 0xe7}, &(0x7f0000006100)={0x20, 0x83, 0x2}, &(0x7f0000006140)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000006180)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$uac1(r5, &(0x7f0000006380)={0x14, &(0x7f0000006240)={0x20, 0xe, 0xf8, {0xf8, 0x32, "3493269f85348989ae2d3badef74b588e03077de5e96e16f765141ae56c68f15033765bc72e56a91885e922f1fecb7a3dab17c9abb8f1a8272e0d608bb3370dc638172e65967bf45e13945a81af7b7c0071f0ed93760bfc690ebeb9752137ffe2fd0292286fe008c5213d49f12e387f2d31ba444d0e3c30d0c92cb52e589b6a54fb0b729a7c38c793ce61006d216cb41b83d41b6c73407e37aa46fa58d6c127c90e9998f5e6ef0826fa65e9b8d03b734805efe866d1471e6964c56ce35f87304286a0a508a3d7100fe4bd8ebe1a4e9e880caa40d720de3f679e4cb72275c25896afc6ec87584ba065ab7e8805a5588dd093b881e3f15"}}, &(0x7f0000006340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f00000066c0)={0x44, &(0x7f00000063c0)={0x0, 0xc, 0xfd, "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"}, &(0x7f0000006500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000006540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000006580)={0x20, 0x81, 0x3, "187571"}, &(0x7f00000065c0)={0x20, 0x82, 0x3, "65b9b7"}, &(0x7f0000006600)={0x20, 0x83, 0x1, "82"}, &(0x7f0000006640)={0x20, 0x84, 0x4, "5b02ba90"}, &(0x7f0000006680)={0x20, 0x85, 0x3, "81eac8"}}) (async)
syz_usb_control_io$hid(r5, &(0x7f0000006880)={0x24, &(0x7f0000006740)={0x0, 0x30, 0xa, {0xa, 0x23, "98d6a96b77a3028c"}}, &(0x7f0000006780)={0x0, 0x3, 0x51, @string={0x51, 0x3, "c765b50ca1cd5e3ee1471a08abe29ae1c83186611cd1c50aba1d37be2bf9c55db01d2090bfe7119b7a7d316c76ed7a314efac68db4b892dfe9fe43fd184c3931124226ef047213203ee851dcc9f33a"}}, &(0x7f0000006800)={0x0, 0x22, 0x4, {[@main=@item_012={0x2, 0x0, 0xa, "9fa0"}, @global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000006840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xb56}}}}, &(0x7f0000006b00)={0x2c, &(0x7f00000068c0)={0x0, 0x18, 0x8b, "300a585a17920454d4d3f4f23c35ebb8ffcf700be1cd2e21dd280492bc6846022ac9586201b4fec7cf8ee4e17a472607aaf23bf9e784dbae7bccdae7b473de298b0f9b9f8d7a9f218a76706b44b0950aa2a0971b9637f43f663dfd3fcd2db880f61e3d7d5991005602f9a7cd49920f0762cda918ac9329232f5d1b523b53b75cc6f665afd99c16d20974a4"}, &(0x7f0000006980)={0x0, 0xa, 0x1, 0xa9}, &(0x7f00000069c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000006a00)={0x20, 0x1, 0xa1, "1a0beb2d7c35ea5e35166582b84f3c2fde22ca5e900a8cc035c5931f1273d3b8d92946a03e8807367d33491becd4d22ee4bfba1cb4d506bd0a844a6f0e7c2c5950f3d42d3f70cd16572214f9b07ca2b02000df756f9520ba5bf743802f4b092d48926fd2fd3c93704cadf3661bf5a24f133dc2b8b0e900af8866d5a8f99547bdc61591edd27021ae443fa6841cb6c5ef8784e373ee5294db54842ce99b064b4fa3"}, &(0x7f0000006ac0)={0x20, 0x3, 0x1, 0x9}}) (async)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000006b40)=@conn_svc_rsp={0x0, 0x0, 0xa, "04fc1dc2", {0x3, 0x102, 0x0, 0x3, 0x8, 0x0, 0x7f}}) (async)
syz_usb_control_io$uac3(r2, &(0x7f0000006c00)={0x14, &(0x7f0000006b80)={0x40, 0x6, 0xa, {0xa, 0x22, "0f67cabbc0fa6c6b"}}, &(0x7f0000006bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000006e80)={0x44, &(0x7f0000006c40)={0x40, 0xb, 0x4b, "3e7691b5a446e268a9d482fe5533ed8cd5f607073352812dc5946d01161f7effeed37a1932c5c945cf645168bb50b0d2b217e28a94da5927c40bb339873a868c185b961d21c5b567e551d7"}, &(0x7f0000006cc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000006d00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000006d40)={0x20, 0x81, 0x3, "99c341"}, &(0x7f0000006d80)={0x20, 0x82, 0x1, "ea"}, &(0x7f0000006dc0)={0x20, 0x83, 0x1, "e5"}, &(0x7f0000006e00)={0x20, 0x84, 0x2, "cfbb"}, &(0x7f0000006e40)={0x20, 0x85, 0x3, "e73ad7"}}) (async)
syz_usb_control_io$uac1(r5, &(0x7f0000007080)={0x14, &(0x7f0000006f00)={0x20, 0x24, 0xb8, {0xb8, 0xb, "431a0c0cc04f22ee5ccccc2ce2f5c7376c48a7c9270335949e19f23f00de1390820d1396aaf4e4c4c65f2ad9871d4e8a918796017296cdcc89ded5709fe3f4337c227bb1a5e962cee645293f656fcda1d187161d793e9caf1f919b8d5430c0fff79d2b61f519dc42b16f34d895f7d26c9c060963dd3f02b5952519d496afd7a842d4ae86f50a83e0a777023a7f4b512a0a2f87085d364c29fb0e267d0979ec27179b67a33d6222e5980bb708c4824715818bb4f85d9d"}}, &(0x7f0000006fc0)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "33345c87d39b9b7d967c2d6ccf58c0d675c7bea59a41cf2358c31a3a05d429928f77e50b3e78fc9caa4818b9f0f83086361ff8029d8a8ab91db80ab780e601695c1c88f93465abdfabdcd6d6c2688bed00a23dd08fb9b4e72363e3631b9ed86f7d4de2d53ca6016861241e46b6c3e9222088924ee68ebea184e358e74ae0bc0179ecc4df063a7a874689d86b75c51e269336b575e105ec432af6e590e7eb9d0b19c7ea52419023"}}}, &(0x7f00000072c0)={0x44, &(0x7f00000070c0)={0x0, 0x1, 0x11, "ed84d775853aa8708c9b9fc9211cc72d42"}, &(0x7f0000007100)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000007140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000007180)={0x20, 0x81, 0x3, "57c558"}, &(0x7f00000071c0)={0x20, 0x82, 0x2, "0da0"}, &(0x7f0000007200)={0x20, 0x83, 0x2, "c8ba"}, &(0x7f0000007240)={0x20, 0x84, 0x2, "f716"}, &(0x7f0000007280)={0x20, 0x85, 0x3, "625bac"}})
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000073c0)={0x14, &(0x7f0000007340)={0x0, 0x22, 0x1a, {0x1a, 0x23, "3066f0776e6a4583c54a2d5121dc5e9616a3dabe2ca8b54a"}}, &(0x7f0000007380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000007600)={0x44, &(0x7f0000007400)={0x40, 0x7, 0x4, "f6e4fa11"}, &(0x7f0000007440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000007480)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000074c0)={0x20, 0x80, 0x1c, {0x0, 0x800, 0x9, 0x638, 0x2eca, 0x6, 0x2, 0x2, 0x5, 0x0, 0x6}}, &(0x7f0000007500)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000007540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000007580)={0x20, 0x87, 0x2, 0x10}, &(0x7f00000075c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_connect$uac2(0x4, 0x10f, &(0x7f0000007680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4b4, 0x931b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd, 0x3, 0x1, 0x2, 0x50, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x749, 0xc, 0x51, 0x80}, [@feature_unit={0x9, 0x24, 0x6, 0x3, 0x6, [0x7, 0xf4]}, @effect_unit={0xb, 0x24, 0x7, 0x2, 0x3, 0x2, [0x1, 0x0]}, @multiply_unit={0x7, 0x24, 0xc, 0xc0, 0x2, 0xd}, @processing_unit={0xd, 0x24, 0x8, 0x6, 0x7, [0x3, 0x2, 0x2, 0x1]}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x402, 0x2, 0x1, 0x3e, 0x7, 0xc0, 0x0, 0x7}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x205, 0x2, 0xd2, 0x9, 0x2, 0xfb, 0x82, 0xba}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x21, 0x80, {0x8, 0x25, 0x1, 0x0, 0x33, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xcf, 0x3, 0x6, 0x5, "8af2b37405896ddfde"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x8, 0x6, "6a6c09ff993eed"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6}, @as_header={0x10, 0x24, 0x1, 0x81, 0x5, 0x3, 0x4, 0x2, 0x4, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0xae02, 0x3, "cb3c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x3, 0xff, {0x8, 0x25, 0x1, 0x82, 0x3a, 0xd, 0xf}}}}}}}}]}}, &(0x7f00000079c0)={0xa, &(0x7f00000077c0)={0xa, 0x6, 0x300, 0xb, 0x1, 0x5, 0x40, 0x7}, 0x103, &(0x7f0000007800)={0x5, 0xf, 0x103, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x3, 0x0, 0x6b, [0x0, 0xff30, 0x3f00, 0xc0af, 0x7fbf00]}, @generic={0x9c, 0x10, 0x1, "be3210c2e6461a37954e03961b4914cb077ee8974e9cd7e03ebe77f4194bbbf45d58373bae7a706b0ecef599eb7879a2977eba904559cee20181a987788f5796fe8853dd45cfadb9924145d5c4ced8fef85af5ca2bec3d65266049972af5d00303d14239618bd2d0998e41a1c08b212a1673d4686eec231b86e09c8f412589cbf405dca8b4d5602fbc7fa9fe216dbeaedc6f0395337f63ed63"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x0, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "817b7caed8e06a52b828e7e265c31dd8"}, @ssp_cap={0x1c, 0x10, 0xa, 0xe, 0x4, 0x400000, 0xf, 0x3, [0xf0, 0x0, 0xc03f, 0x3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb, 0x4, 0x81, 0x7ff, 0xc}]}, 0x2, [{0x4, &(0x7f0000007940)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000007980)=@lang_id={0x4, 0x3, 0x584a}}]}) (async)
syz_usb_connect$midi(0x6, 0x91, &(0x7f0000007a00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x8b, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xc, [@midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x8, 0x2, [{0x4}, {0xba, 0x2}], 0x4}], [{{0x9, 0x5, 0x2, 0x8, 0x40, 0x81, 0xf0, 0x7, {0x8, 0x25, 0x1, 0x4, "4e168dc2"}}}, {{0x9, 0x5, 0xc, 0x0, 0x4c, 0x6, 0xf9, 0x8, {0xa, 0x25, 0x1, 0x6, "aa83ca072eb6"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x0, 0xb, {0xb, 0x25, 0x1, 0x7, "77899f097030d7"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7, 0xdb, 0xff, {0x5, 0x25, 0x1, 0x1, "ef"}}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x2, 0x3, 0x40, {0x13, 0x25, 0x1, 0xf, "6555a8cec7faf38f6f95d529200fea"}}}]}}}}}]}}, &(0x7f0000007e80)={0xa, &(0x7f0000007ac0)={0xa, 0x6, 0x201, 0x22, 0x1, 0x7, 0x8, 0x1}, 0x46, &(0x7f0000007b00)={0x5, 0xf, 0x46, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "595e5ced0bb9b7d5f9a7d425130163de"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x6, 0xf07, 0x9, [0xff00, 0xc0cf, 0xf, 0xc03f]}, @ss_cap={0xa, 0x10, 0x3, 0xdf4f9f02d973fda1, 0xe, 0x2, 0x23, 0x35f}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x3, 0x8}]}, 0x8, [{0x43, &(0x7f0000007b80)=@string={0x43, 0x3, "b2897dcbf6781490375340ea641bf90564e8ed5cef0cb8b73891b136b475ae87cad900aabeca3ef8ed3bdc674843ef21735a0b77a6ff7513948830f9d049af5fab"}}, {0x6e, &(0x7f0000007c00)=@string={0x6e, 0x3, "1389033fe0b79282605a13046e924803bda200be125eef81aa86988d2aedf5b094ee97f52c0a85fdedf68a134020eed3c7e9077f067c54dd945210bdefbf7956437ce16b0aa4492c9d92c8b63bf3f0956c1ee078fb07e1fb5ed242119be1a53cdd4436a881cb97bd1bf1c241"}}, {0x4, &(0x7f0000007c80)=@string={0x4, 0x3, "17c4"}}, {0x4, &(0x7f0000007cc0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000007d00)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000007d40)=@lang_id={0x4, 0x3, 0x44d}}, {0xf6, &(0x7f0000007d80)=@string={0xf6, 0x3, "6eb5070d976d7008eb52490a4db57efb2840dcbca262cd5a691efe1236f3157cf95f03088736351caa7293f5884b97bbe0c1368c26a5658d3c4d1debec7e136661b64fc2f3dd0d9f83c303a327c38679a3845f77fbf87de88e5e25def6224581a67b8800adc1d4a31fa72cd416fe809d9284f6505603c7ff857e607be9568a8262f15e8c003958d926e2f2dc2331149b980485cba586fd6800da246706be49a57927fdc0c21fd0a4d89a809a862983b3679ca9fbe5bfdc567ee9cb1eb85c36a9a528b27365fd0e9f21d61ea36dc8c0dfd75784294d4ef15a2a9a2fd10088cf84e54375790180b086c33d7e113ed92af7d1559935"}}, {0x0, 0xffffffffffffffff}]})
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r0) (async)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x6445, 0x4000) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x0, 0x8, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3f, 0x40, 0x8, {0xa, 0x25, 0x25, 0x294, 0xd, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0x0, {0xa, 0x25, 0x25, 0x6, 0x4, 0x100}}}}}}}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x6, 0x30, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1a}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xb60}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x6, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0xfc, 0x66, {0x7, 0x25, 0x1, 0x8, 0x9, 0x373}}}}}}}}]}}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000040)={0x0, 0x7, 0x4, "9c98d93a"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
syz_usb_disconnect(r2)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0xbf0)
executing program 1:
r0 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ba64074501844c02030109020900000207804600000000"], &(0x7f0000000040)={0x51, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$rtl8150(r0, &(0x7f00000013c0)={0x14, 0x0, &(0x7f0000001340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac2(r0, &(0x7f00000018c0)={0x14, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) (async)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000002d40)={0x14, &(0x7f0000002c00)={0x20, 0x5, 0x97, {0x97, 0x2, "1fc8228c5c9612b2a25d84e05fd65e5b61d923c5e19214179f6f27b17d2c195c870a8647427ea2978b11eaf96d1d735180866abc7b00ac366c3058f591a75a20ec74cdce0c133fda5f677a7c555b00d6d700d70aa18d7c0593e699c8530d55637bb1ca822318fb38432e0c58e4b0b9967cbe6ace2763a2906ffbbf64aa0959db335df1e3332a56af37fcb7d196ded431ffe4ce72b3"}}, 0x0}, &(0x7f0000003000)={0x34, &(0x7f0000002d80)={0x40, 0x1}, &(0x7f0000002e00)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, &(0x7f0000002f80)={0x20, 0x1, 0x1, 0xf2}, 0x0}) (async)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb48, 0x1005, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r1, 0x1, 0x40, &(0x7f0000000100)=""/1)
syz_usb_ep_read(r1, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x31, 0x7e000)
executing program 2:
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000202505a8a44000010203010902240001010710400904000102070102a10905010220003c09ff090582020004040007"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$midi(0x5, 0xb0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1026, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x1, 0x1, 0x6, 0xd0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xd8, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6, 0x87}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xfd}, @midi_in_jack={0x6, 0x24, 0x2, 0x6, 0xbd, 0x1a}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x69, 0x3, [{0x1, 0xd7}, {0x8, 0x7}, {0x2, 0x7}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xfc, 0xcb}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xff, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x8c}], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0xd7, 0x6, 0x7, {0x13, 0x25, 0x1, 0xf, "19779ae3b09cbb73476100f306f85d"}}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x1, 0x92, 0x6, {0x11, 0x25, 0x1, 0xd, "7032d92b76483b3b625813eb46"}}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x3, 0x2, 0x3, {0xe, 0x25, 0x1, 0xa, "8760cd7294540aa37bc3"}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xfa, 0x5, 0x8c, 0x20, 0x80}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0xb, 0x9a26}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x7f, 0x5d6}]}, 0x8, [{0x74, &(0x7f0000000140)=@string={0x74, 0x3, "10929c1a64fc57f22397274629a9b7b68a5ccf2672c0eaa77db042127d31052afb0a976003b3b2896fa779f9985a956e01cd68722919589692bd29edeb3932ebcc0efe59b35d238d77d16def77c4d11abeb00f0b637557d704ca4592fa7337674fa8347f970650f0bbfca3ae8c0b1970c2cf"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42f}}, {0xff, &(0x7f0000000280)=@string={0xff, 0x3, "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"}}, {0xd4, &(0x7f0000000440)=@string={0xd4, 0x3, "365652e5956e4bb74f884cab409ed11f1fc4d6503575e4a12e1ef4bf41b162a0c813b3d571ccef4045287b7b95016976c056c8727ab438360e9ebdb1d4b66aa7c27c53b3d3a4cea6408aff06bcbf01e6067d92a6709212183f47990fbcff176ba5d5396e0d6aa7e7fd119f998ad80ff470f10cb35a07a907f50e17615dc9d36e24e0bf9f87dc3a697d2c854c6b93d0ff77b3e7a9b4cc8ed396b2bf8b4dfd138af548ba68c7fc3d2fd5d62f115557c08cb460f129169f189620fc869be7e8b3c1e32313cb6edd11e3beb80614111de56a1091"}}, {0x71, &(0x7f0000000540)=@string={0x71, 0x3, "f9330f8f128154e049cacbcc700d7b6dcf021dfd866a8e3fce5e0c9c91db3797b7a704bc8e6b8de9e2563b0971ca32b9f36b2dba44b57c9b0b8560443d1fc75917c54de1ff09632b48f18cb34d15068fa2523d2957359888676a0ea5ad49a9333fe879a71282e6f124736405547e94"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41b}}]})
executing program 3:
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002503050a2525010400000500000904020000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000080f7f2238e7c835a9d76def1ccd1824270b656bc1bdfa08237b357aea3dd60d09a96ea0f1d22d5905d5c68f6c2e5ad2839b91db5b0fd7f6ea92fd2b1d10eeba3fde82da409d6aacd570e733337b9eabb4d04836040424595093f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
executing program 4:
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$uac3(0xd, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
r2 = syz_usb_connect(0x5, 0xc7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0xc0, 0xd, 0x56, {0x56, 0x7, "635158303afd0964e7c056eff742167673a03ddfeb7ded10ec9ffbfbf8c64d1518465d0e336356f594d765de910cad75185bcac53d2ecd3521b0323858fcb2193ed3940a7d1a0c43f9448cca78b82c4516e0a85e"}}, &(0x7f00000004c0)={0x0, 0x3, 0x8, @string={0x8, 0x3, "469308c2cd75"}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000580)={0x40, 0xf, 0xed, "7757611a6cfe94334349cf8febae3ff598dace48685570068466195e9cc7d3055b7b44ee719eb2885ce926d18af34bb07dbff6dbb4abb0b70def220022129df1f83d5944455ea6edd27cd866686d734e7c9b31f2ba084983f7cd5ecdcae9e56b7289f1a571227412bd677e1999399f8cefbd75edc0232968639acca93adab29d6f3fbc4d447edf414ee060b6087c21a92e6b2e9b2aa25c1c22164af354ae440dcea7f2ba97c183511bec2e1c5beee31180bff36c0d6c3fc7923559f196c1d907ed2d796b1e42f46b98395bb6232a02eba4c5c8b043effe2782a69786662c09251b3a6c135018c400f031a51d82"}, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ac0)={0x21, 0x0, 0x4, "a499b5ba"}})
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904019d080a"], 0x0)
syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x80)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201000913a939db338f6bfb9f3c10ad88f765eac165ffae71c61f8c805a"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x480e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfd, 0x90, 0x40, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x200, 0xa, 0x1, {0x22, 0x70}}, {{{0x9, 0x5, 0x81, 0x3, 0x260, 0xdc, 0xf, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x9, 0x6}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x0, 0x2, 0x4, 0x8, 0x8}, 0x10e, &(0x7f0000000b40)={0x5, 0xf, 0x10e, 0x3, [@generic={0xf4, 0x10, 0x3, "685ae47e1a7eb0feac4963020bcdb93393b4e84b649a068c9a5bd689f26bebce269ef22492ffaaf8dfcae00218be8fd44e6dd9274eb62bf8b34570cd9d6706a65deab6c031601ab826d7171bd5165e5f2e9ac8ea7da20609508078ac9ce76766dd9b66c129ec36ecdbe687b74fc4f4519f8a2b8ccc0905a9fbb280354975c745c6e06ed8194b8d83fb164e4efa294cab2cd138e1183d6378816099a7197233efa12bb28fe25c30b0b78f17a403c2c3748c9bfe0e85dd380f1d573a2d35c364f03a08768b5c4c338b60b91124f70243f9d7285a3905c1d776b369db7d9f1ff88b2fe484e612fcc09d17e0460b4d8bd1a34e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0xfc, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x28, 0x7, 0x42}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44d}}]})
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x2)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="4015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687c929f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105030f1b1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000140190933334000000000010902"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/76)
syz_usb_disconnect(r1)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905010000060000000905021008"], 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_ep_write(r1, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f00000004c0)={0x0, 0x31, 0xcf, {0xcf, 0xd, "c46c7f433e1b57471d6f56903939265c8ea24f5954916a2e6a2a90594437919ab5c30de2cfbf1a7be389b0445885e334e7b9d2ebfb8e297fd1bde175e9f95ea3c08708d415cca0bdcd9163d4a4ee2471434981b857778a325c20238d36b2b408b35c5aab154b9c7050f7e2577e616861f81a3f2dde0899be60b7b8f03e4bf9400fa809c8a3cefd9b74d5b045a86a0db14b385ddfb31684589167fff45cc2eaad1db7dadb43399d44cd5b72e1a01e98287292aa896dc85b68f2588b4214139662de4e89c0a001d20bae1683a9b9"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000600)={0x0, 0x22, 0x3, {[@local=@item_012={0x1, 0x2, 0x8, 'K'}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x5, 0x1, {0x22, 0xc0e}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x20, 0x0, 0x4f, "b5ccf785efeeb74d0022aa962d038a16f89c0321bd9681fcf5c167b217a6128878611f0636a8d1e85535c3d6baea97129d23ae8698dba62d4fb130dec4a2943fc36dd7cd337f1b0bf50c3a4f84325d"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x1, 0xd1, "e983f551b5a455b686ba200057f6d7434f38ab195bb3e10366b1790b755f08488f6076699bc649fa80447fc60ac3928dfd18e2fdd09640789a96f831d0de1d5349209f238669fc502d2f4495db6adae420ddf1dca3c7ab7b6f37e448648a363d9eb7b622526a42366fee62559d486ffc014fc2759166d1edde455c4398779bdc051fc3e40d2a0099d9d5881a1dc033cca07db0dbc7dc53bb0165d7eae7ddaa5151f83278e76c8bf1374cf382b4afa51c72480df263a987972ea3a699ece941f85458eb6f17728ba7ffe0f74c6d7b25a013"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xf}})
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x0, 0x9, 0x93, {0x93, 0x10, "a34a811227cd92dfcf1f3be67ce58d715cfe912c9406e533dc1509a9e8c23925e54662581cca8c2cfc6af61c237340168e19c490cf24346a7a558e211c431689fcb84abbd322b24bd4280e90f7695f0eb6e33b65833bc42df49e7e51d9f6cce1be5d3d968d77d9593a31889a90f5349c6b39be0e543b17ec9d8b6caa2b5721cf80214fd90cce06be07d44f826ebcc179d0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f0000000180)={0x0, 0x22, 0x2, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf001, 0x6, 0x1, {0x22, 0xb99}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0xa0, 0x38, 0xa4, "4357fc759da521fcae968efd298916d40d97a9e7c5a65ed13d957cfc268f910b6b1e598331284f076bf8a4997c983aed0fa90abbfeace75010aa7d44c81bb058ddaa3a0f910941f88586fb1b89c45949e4625bc09032f12bea8085a5bf7396091bcbf401fd5cd16c59e7bdb30008dca45498d56c399ace194b20f2f88cb431ef5ab95f11b7f35bdbccf3bff9e63b614eef69e3504e43251f3cf3e896f211177bd9e52fcb"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000003c0)={0x20, 0x1, 0x45, "767626be817addd1f209e4a2a707af905b9db059eb424f27dc3fcd58256c2398a97655a577425314f4c941f2d31451ce107ee4018a06c80dfa006177e7f6b2314a62aef804"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3}})
syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0xb, "93b4af02"}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
executing program 2:
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x1c, 0x0, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f00000035c0)={0x14, &(0x7f00000034c0)={0x20, 0xf, 0x17, {0x17, 0x2d, "b74a04d69545e99851e858586a2488753b3eb4d8c6"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x6, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00')
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x927}}}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440)
ioctl$EVIOCGABS20(r1, 0x80184560, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x48, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x92, 0x70, 0x18, 0x40, 0x1410, 0xa012, 0xc45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x2, 0x1, 0x50, 0xcb, "", [{{0x9, 0x4, 0x1, 0x8, 0x1, 0xff, 0x3a, 0x14, 0x8, [], [{{0x9, 0x5, 0x6, 0x3, 0x10, 0x1, 0x6, 0x8}}]}}, {{0x9, 0x4, 0x7b, 0x6f, 0x1, 0x42, 0x34, 0xb9, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x9, 0x9, 0x6, [@generic={0x9, 0x4, "41720bf7952d7b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x8, 0x2d, {0x2d, 0x24, "0429fc57581ff8acff2e6d5ef0424e388b3dd2d4636eb2194a47529772a7ad4d9b1172ade12a4cd006da37"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0xe, 0x90, "47715264bfcc7d0c44925e601cd978874c3764ae478862d0e89c0391dc157e5b574384b0557037dbf13ae2830f8140071eaea471e03b357e206452bc274625d9e740dde6f3db1f0d43e223d048a2bcc0ea77b6fbc0ef351a234dfbcfa3b2acb13bf5d6dc0fa2391c37d93099e7adc7177deee3b6efc7e9a0a596fe503faae55592fabad7ef8eb5dd187bebe6a08ee059"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b0000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c2443d4cf8becd3f3b8efc7bb0700000000a3e82f07070d240721060000fd8000"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x2, 'W7'}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x40, 0x30, 0x2, "b200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000080)={0x20, 0x31, 0x2, "658d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001040)={0x40, 0xe, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x7f, 0x0, "6a3e2df0", "613e2e8b"}}, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@0\''], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001700)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="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", @ANYRESOCT=r2, @ANYBLOB="537b47bddf6d7c8af89277cab5ace3a8b17f59ca24760569cc5cde9acd3dc9f52d0a3ccf2b6ba1ba543177f350c6ebd483b039cd75b7c4e92d70f6f1e9bd9ee5ad6700ac0d0429da39f4a304cec13df61438cd8059bec840"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x18, 0x6e, 0x2b, 0x40, 0x10b8, 0x1faa, 0x6112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xa, 0x0, 0x7, "", [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x55, 0xa3, 0x55, 0xe6}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000cc0)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$lan78xx(r5, &(0x7f0000002dc0)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000003740)={0x84, &(0x7f00000032c0)={0x40, 0x9, 0x7, "8416a80bfdfd6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x105, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0xf, 0xb0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x29, 0x6}, [@selector_unit={0x6, 0x24, 0xc, 0x3, 0x1, 'o'}, @source_unit={0xc, 0x24, 0xb, 0xe, 0x0, 0x5, 0xcc, 0x7}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x0, 0xd]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2a, 0x3, 0x3, 0x7, "ad0e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x39a7, 0x4, 0x8, 0x3a}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc62a, 0x3, 0x5, "ff2d0d5fcebaadb0"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x69, 0xb9, 0x10, {0xa, 0x25, 0x25, 0x2, 0xc0, 0x8934}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x72, 0x1, 0x81}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0xa, 0x3, "96", "e6c8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1000, 0x7, 0x8}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0x25, "3724e7a1b1bc33d00c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xed}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x1, 0x7, {0xa, 0x25, 0x25, 0x73a, 0x1, 0xf24}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x26, 0x7, 0x5, 0xff, 0x4}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x1, [{0xaf, &(0x7f00000008c0)=ANY=[@ANYBLOB="af0392bc3ad719ffffffff09f96713735123c56e63f2a05cabaf4fc16d22796ec5c7f1cce7c8a4867a8bf6634b9ddb6a7659525039a7d44ddd5afa7925a9fb47bd259aec351b59f1595a76548d34a8336f7a30c5c4afae169d1e9cc85dbe9bd7a08ff1b16ee11093363dad99f57823774e3c3821415e10fe2426c9eb94170632668b0d5c963644230b855fb252d62c448b3a6bd4984d1ef5bcc914a7f2a3eb63a940a04feb07de18661b88542a37000000000000"]}]})
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="4013050000d31f18498a783a801af200eb"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905", @ANYRES32], 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}})
r3 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109026400020108904a0904000001020d0000052406000105240005000d240f01727d465f050009000506241a08000208241c020004080f09058103ff030981010904010000020d00000904010102020d00000905820208007f06de0905030210"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf3, 0x6b, 0xb2, 0x20, 0x12d1, 0xebed, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xff, 0x6, 0x75, 0x91}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xed, {0xed, 0xb, "dec623ea9c37acd853a94c0ee06116f7d75d8ea080355a0d1581584d101596b28f69e7bdccf2cdbaef4196157fc519873a7028923fd6a95ccd4ed1d2d877bf60336fa38be9fd319dd7925df63608494077a87f7b61defdacc22d042bfe8e25d76b5b2f9eb5136086e380bd9a2b424fb1cb91f5ac8b0562c3216d4c4e4f0d72abd63f9b75a5d82e455d9cbb99998298a27b4db0558d679dea2c34e0f72d2f17f39e92498a17ea78d4385e62609442b7840039ff6f73d21718692d33236377bfcaa631b0e91d63eac29dda51f619e5d45d70033658e5d2d1be6e66fbe31364ed01cc39e02860470d836fd7e8"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x0, 0x3, 0xd7, "4004d8608b8f1ec4db512193a4a39449ed6b52e91c36d09c08da733ba755e8ba4f2ef68cbb18cacd317ec72c25a8f1adb6a9c9164998be6a51704583c5f6ce03f3d64b98860a1dbcc36a835efb2b79df7bcd776f6bffcde65dae062f8a97b169780bd7ba1329c02aa659e8ce6073ce9f93430ec6ee09ea785971257d7946f77d823c61e7b2d52885a05d41eddb21e7b385740f8492b66d04c9a360835b824af3fe5ae087c9c0e1b21559ece1ba8152572c42f520ee324014bfe3412a5bec32ee72a4bf17c0a1b9de0250330d6dc0e9208a7f2708b5512b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000004c0)={0x20, 0x0, 0x59, {0x57, "685139ec73770a93ac3738a204e3647c4ccd0a7722f2274410d49dcc99e467e89cc09871fa94b16a021539f023d682d77c177ef7f6dec98bb1e84575327ce31998c7d2da77dfb9458eced45fd982f9f01c201feea1407e"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0xb6}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xb}})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
syz_open_dev$evdev(&(0x7f0000000100), 0x4a, 0x0)
program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac2-syz_usb_control_io$uac1-syz_usb_connect-syz_open_dev$evdev-ioctl$EVIOCSFF-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$printer-write$char_usb-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905", @ANYRES32], 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}})
r3 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109026400020108904a0904000001020d0000052406000105240005000d240f01727d465f050009000506241a08000208241c020004080f09058103ff030981010904010000020d00000904010102020d00000905820208007f06de0905030210"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf3, 0x6b, 0xb2, 0x20, 0x12d1, 0xebed, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xff, 0x6, 0x75, 0x91}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x4, 0xed, {0xed, 0xb, "dec623ea9c37acd853a94c0ee06116f7d75d8ea080355a0d1581584d101596b28f69e7bdccf2cdbaef4196157fc519873a7028923fd6a95ccd4ed1d2d877bf60336fa38be9fd319dd7925df63608494077a87f7b61defdacc22d042bfe8e25d76b5b2f9eb5136086e380bd9a2b424fb1cb91f5ac8b0562c3216d4c4e4f0d72abd63f9b75a5d82e455d9cbb99998298a27b4db0558d679dea2c34e0f72d2f17f39e92498a17ea78d4385e62609442b7840039ff6f73d21718692d33236377bfcaa631b0e91d63eac29dda51f619e5d45d70033658e5d2d1be6e66fbe31364ed01cc39e02860470d836fd7e8"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x0, 0x3, 0xd7, "4004d8608b8f1ec4db512193a4a39449ed6b52e91c36d09c08da733ba755e8ba4f2ef68cbb18cacd317ec72c25a8f1adb6a9c9164998be6a51704583c5f6ce03f3d64b98860a1dbcc36a835efb2b79df7bcd776f6bffcde65dae062f8a97b169780bd7ba1329c02aa659e8ce6073ce9f93430ec6ee09ea785971257d7946f77d823c61e7b2d52885a05d41eddb21e7b385740f8492b66d04c9a360835b824af3fe5ae087c9c0e1b21559ece1ba8152572c42f520ee324014bfe3412a5bec32ee72a4bf17c0a1b9de0250330d6dc0e9208a7f2708b5512b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000004c0)={0x20, 0x0, 0x59, {0x57, "685139ec73770a93ac3738a204e3647c4ccd0a7722f2274410d49dcc99e467e89cc09871fa94b16a021539f023d682d77c177ef7f6dec98bb1e84575327ce31998c7d2da77dfb9458eced45fd982f9f01c201feea1407e"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0xb6}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xb}})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
syz_open_dev$evdev(&(0x7f0000000100), 0x4a, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_connect$uac3-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b0000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c2443d4cf8becd3f3b8efc7bb0700000000a3e82f07070d240721060000fd8000"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x2, 'W7'}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x40, 0x30, 0x2, "b200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000080)={0x20, 0x31, 0x2, "658d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001040)={0x40, 0xe, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x7f, 0x0, "6a3e2df0", "613e2e8b"}}, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@0\''], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001700)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="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", @ANYRESOCT=r2, @ANYBLOB="537b47bddf6d7c8af89277cab5ace3a8b17f59ca24760569cc5cde9acd3dc9f52d0a3ccf2b6ba1ba543177f350c6ebd483b039cd75b7c4e92d70f6f1e9bd9ee5ad6700ac0d0429da39f4a304cec13df61438cd8059bec840"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x18, 0x6e, 0x2b, 0x40, 0x10b8, 0x1faa, 0x6112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xa, 0x0, 0x7, "", [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x55, 0xa3, 0x55, 0xe6}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000cc0)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$lan78xx(r5, &(0x7f0000002dc0)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000003740)={0x84, &(0x7f00000032c0)={0x40, 0x9, 0x7, "8416a80bfdfd6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x105, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0xf, 0xb0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x29, 0x6}, [@selector_unit={0x6, 0x24, 0xc, 0x3, 0x1, 'o'}, @source_unit={0xc, 0x24, 0xb, 0xe, 0x0, 0x5, 0xcc, 0x7}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x0, 0xd]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2a, 0x3, 0x3, 0x7, "ad0e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x39a7, 0x4, 0x8, 0x3a}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc62a, 0x3, 0x5, "ff2d0d5fcebaadb0"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x69, 0xb9, 0x10, {0xa, 0x25, 0x25, 0x2, 0xc0, 0x8934}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x72, 0x1, 0x81}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0xa, 0x3, "96", "e6c8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1000, 0x7, 0x8}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0x25, "3724e7a1b1bc33d00c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xed}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x1, 0x7, {0xa, 0x25, 0x25, 0x73a, 0x1, 0xf24}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x26, 0x7, 0x5, 0xff, 0x4}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x1, [{0xaf, &(0x7f00000008c0)=ANY=[@ANYBLOB="af0392bc3ad719ffffffff09f96713735123c56e63f2a05cabaf4fc16d22796ec5c7f1cce7c8a4867a8bf6634b9ddb6a7659525039a7d44ddd5afa7925a9fb47bd259aec351b59f1595a76548d34a8336f7a30c5c4afae169d1e9cc85dbe9bd7a08ff1b16ee11093363dad99f57823774e3c3821415e10fe2426c9eb94170632668b0d5c963644230b855fb252d62c448b3a6bd4984d1ef5bcc914a7f2a3eb63a940a04feb07de18661b88542a37000000000000"]}]})
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="4013050000d31f18498a783a801af200eb"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCGABS20-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440)
ioctl$EVIOCGABS20(r1, 0x80184560, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x48, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x92, 0x70, 0x18, 0x40, 0x1410, 0xa012, 0xc45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x2, 0x1, 0x50, 0xcb, "", [{{0x9, 0x4, 0x1, 0x8, 0x1, 0xff, 0x3a, 0x14, 0x8, [], [{{0x9, 0x5, 0x6, 0x3, 0x10, 0x1, 0x6, 0x8}}]}}, {{0x9, 0x4, 0x7b, 0x6f, 0x1, 0x42, 0x34, 0xb9, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x9, 0x9, 0x6, [@generic={0x9, 0x4, "41720bf7952d7b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x8, 0x2d, {0x2d, 0x24, "0429fc57581ff8acff2e6d5ef0424e388b3dd2d4636eb2194a47529772a7ad4d9b1172ade12a4cd006da37"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0xe, 0x90, "47715264bfcc7d0c44925e601cd978874c3764ae478862d0e89c0391dc157e5b574384b0557037dbf13ae2830f8140071eaea471e03b357e206452bc274625d9e740dde6f3db1f0d43e223d048a2bcc0ea77b6fbc0ef351a234dfbcfa3b2acb13bf5d6dc0fa2391c37d93099e7adc7177deee3b6efc7e9a0a596fe503faae55592fabad7ef8eb5dd187bebe6a08ee059"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}})
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$sierra_net-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$hid-syz_open_dev$char_usb-read$char_usb-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_open_dev$char_usb-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect$uac1-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x1c, 0x0, &(0x7f0000000240)={0xa1, 0x1, 0x400, "6a103c6c72297a6571ed33f415094cf192017cee67ab55de6aaeb1bbdb2b18c739894e801d49f5588a7df7e7efa760d42bb552a891a70d5dbd139940b8d921faf1f464b059d8fb861479f7ceccac9427bbe387bc526ef9bd61c0534e73bf35ec1d3708dc04e904a801b02e2990d9db76276d50922d400653dd0b2da260cb4fbfb579729af66ea21442f0997e4a5475e5b80c05527992ffdb56c6f3a5d578180184be27ed88dccd85437bba046a2cd216cae85c1d6b8c2491189ed9d534d6e99a018f4ef9636f453e588f69d48ed80015cb7f51636be2d4d857af0338f4568a28c01ddceb67b275c6961a98f519b64e6d7e98933475ba772c427d25f70652827f6d135809c4e34271a59c0f2469206d7d0aae1c0ff7cf2e00d0028f58e7c8e128f0778f48cc3ad0b4ff6c6bf9e4bf6a73229e7b4d0299f720e461aa03a4a435b088d8a90e95a899907b4a37c30ccf8a32a24c073fc9efb6510a6ce8e5fa5bf0df6050ba38fbc7a832c13600b954bf3893870012b798c13ef76d299b31243a1f83287933d20582408d085f76f3d2b3870bcb37cc32a9fb0a0327648c757f7674d51ce7060bf70dbfb89c29ad7dd16d191184401e021c834d38e73ae7b7eeab30346ec2068b9b7a234f4e84c7536a5b32ea1c41dca502d4fe23eb9a2245e1ec0751a36a48fd131a118acc887f750d1c0d0e77c1a6b92ed9274f0031b5e93fc30c8df704bce9eb031f00c52777ecc8f43f45bef98d64272fece775c08b7ee3d1321bdb7cdd51fc3f676cc78c5ffdf421b16faad69ac63d442eb791b4c521d7df1ec7c9f5a8703f4522bb3c7508be7315c8f47235b8fdf2f930400d173e0a0c7544f443deb97a684454273e3d60fdef474d82e1dc3f21e451a512e172f1dbe56c87721dd6812f008e1ac87564108ad8840f4a397b21c47913dffda0a19f2eccf4ae78ff30e8250ba4811e7d1e325822149d2fb9a4a35879f0cb2078ef77213c065936498c1c23ec212b4ee815637790c92257a1bf5434cca2cd015a7c27281eba1ae7648fdcd314a5e9411384196d9a57d2bf5da8bdc28f12f66750c02d54ed261d91cd9eaf2e95fb5f6bcbbb35201611dad675542227760f95389e9efcabc3b28e40d40cf3f1d46c6d4476df941957e4e6fd9a2ddf4933d117be1bcbc554537e4a728d86c10279b30ac5d229a9dfd7254d9c5f5c2a1e2ab6716439616c0e10f6953607ca3e7ce1346bd6dd1c3ba72a7af34fa35fedb0499744242acd9548c6d1703dfa70250b5bb405a57f4c6bd69a4fe0a910982483c9f7aefe2a1f68b52f0d349823e389b66c12a45b47d765acfe572651c5076fb114c1f68b8a66042db412f3fd8073dc9e2022238c5678a9cbe07599e1375c43b5e42a199977844687b2b04d4ad0d4915ab70c30d660d06ff9dca6c5e61f30c185ce1ea910a5a0fa98e30e2dee"}, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f00000035c0)={0x14, &(0x7f00000034c0)={0x20, 0xf, 0x17, {0x17, 0x2d, "b74a04d69545e99851e858586a2488753b3eb4d8c6"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x6, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00')
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x927}}}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0)
syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
single: successfully extracted reproducer
found reproducer with 23 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_connect$midi-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Write in ms_read_bytes
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
r1 = syz_usb_connect(0x2, 0xfffffeec, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x19, 0x64, 0x43, 0x20, 0x10b8, 0x1f98, 0x6213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x50, 0x4, "", [{{0x9, 0x4, 0xa2, 0x7, 0x0, 0xb9, 0x7b, 0x93, 0x9d}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_connect$uac1(0x5, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xf9, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x22}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, 'Kq'}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0xfff, 0x0, "be"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x2, 0x6, 0x6f, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5d, 0x0, "a7a877777a38"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3c, 0x9, 0x47, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x802, 0x5, "f65323d90d4863e5bf"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, "4545ab6741ae"}, @as_header={0x7, 0x24, 0x1, 0x1c, 0xa, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf0, 0x1, "3fac68", "2f0cbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x72, 0x44, {0x7, 0x25, 0x1, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0xff, 0xa, 0xff}, 0x62, &(0x7f0000000200)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xf00, 0x7, [0xf, 0xf, 0xffdf80, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0x1, [0x3f00, 0xffc000, 0xc000, 0xf, 0xff81f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xb, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x400, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ffff5b, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x80, &(0x7f0000000280)=@string={0x80, 0x3, "d1b4252e5df6c4b3ba38007c3345a03129ce8b2fbd04a3b54bd716fb2723c2f26106327de2b1b5af8300a1a322c36a994e92575fe664060ee591783fa47bd42430a52ad396c70a43b6008bd1644d60501e7c92dafb5c6f6321c5fcd86fdbb0ac42d446b7261a00a46e843eb79b5273026f30c1a8b1c0f0c87822f974c26f"}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "c72f22df07ab55dc4dba23abece6fca5b836bf735664cb8022a1284e09e4db903c02847c39562a8f60fccd5f5d8d3417f25697c6ecc4649805a790ed57f75e223757c795c14574ad24bec18c398efc086c0980b84fe1d7c6e46a52cb9bed5122617a3b77688a3f30e1a5b9308695e30254ddc615b70221c9dfdedeee3422de5052b321722cabdeed45e7e4da09fdcc1ecf534620716d03ab9fb25de39a79c90e379856d4"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "3310667b87df2895f6ccbf68db2095ad81d4b77550cccf5c46597300b261298aeadc9da966cc1e811addfa0c92e7a84f553b2a74158f3037b60702a86a1aef79710c71945834ec350dde8572ada1d54b9cfe80c42ec476e2ad927d851cf2c08fbcd70c1dc846fec2a65d0366"}}, {0x66, &(0x7f0000000440)=@string={0x66, 0x3, "1b342f7272e8c73d0de948ab93c3e457157479648119662dcd475f7c7b546aaf62155c0a0161f22c121f24a3270f23b0653f9507e17b26e14185c6aa12ca10645c2e928b2359ba97fcfec49fefb6ee3fcd158fd225814a251f078f85b9f4c2912e81b68d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x341a}}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001f00)={0x14, 0x0, &(0x7f0000001ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Write in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x44, &(0x7f0000004d40)={0x20, 0x15, 0x9e, "809ea441e0f03a01761693e395d87455d0edef225b370b3c9863370b3f066e7778a8ca1a932fe895625aa54081e05495326609b5a9a0c2909618bf0bdf10d2324a1f53e576cdb9b69a6ace487168877647b0bcacd2d3d967e601684b6ed48b22e3503a27fa39a3d1dc84052c0c1f4605436fc20b4deb97cc52cd108ed46457416004abb3de0d182876804fd761ca1a09ea192df992dbdeb98551a1da1f10"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Write in ms_read_bytes
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Write in ms_read_bytes
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_control_io$uac1-syz_usb_control_io$uac3-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002cf25613086ae1153f2b52d902d130cd05dd7de478ada5435fdb7abcee1c2bd011cc351d371a22750fc51173812f5ce62fe1b8cf249383322b12c37b37d267cebf8652aad9b18671d1f0b4dd7ae7eca7c2a8e27c3", @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
program crashed: KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req
validation run: crashed=true
reproducing took 2h16m31.715041209s
repro crashed as (corrupted=false):
=========
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff8881082c8071 by task kworker/0:2/978
CPU: 0 UID: 0 PID: 978 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_address_description mm/kasan/report.c:378 [inline]
print_report+0x13d/0x4b0 mm/kasan/report.c:482
kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Allocated by task 44:
kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
__kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
kasan_kmalloc include/linux/kasan.h:263 [inline]
__kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
_kmalloc_noprof include/linux/slab.h:991 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Freed by task 44:
kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
poison_slab_object mm/kasan/common.c:253 [inline]
__kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
kasan_slab_free include/linux/kasan.h:235 [inline]
slab_free_hook mm/slub.c:2748 [inline]
slab_free mm/slub.c:6499 [inline]
kfree+0x20c/0x650 mm/slub.c:6792
memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
The buggy address belongs to the object at ffff8881082c8000
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
freed 2048-byte region [ffff8881082c8000, ffff8881082c8800)
The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881082c9000 pfn:0x1082c8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000240(workingset|head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
raw: ffff8881082c9000 0000000000080001 00000000f5000000 0000000000000000
head: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
head: ffff8881082c9000 0000000000080001 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 44, tgid 44 (kworker/u8:3), ts 87811495059
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
prep_new_page mm/page_alloc.c:1879 [inline]
get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
__alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
alloc_slab_page mm/slub.c:3347 [inline]
allocate_slab mm/slub.c:3462 [inline]
new_slab+0xa9/0x6e0 mm/slub.c:3513
refill_objects+0xe3/0x410 mm/slub.c:7410
refill_sheaf mm/slub.c:2885 [inline]
__pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
alloc_from_pcs mm/slub.c:4850 [inline]
slab_alloc_node mm/slub.c:4984 [inline]
__kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
_kmalloc_noprof include/linux/slab.h:991 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 38 tgid 38 ts 87363331372 stack trace:
reset_page_owner include/linux/page_owner.h:26 [inline]
__free_pages_prepare mm/page_alloc.c:1418 [inline]
__free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4683 [inline]
slab_alloc_node mm/slub.c:4996 [inline]
__do_kmalloc_node mm/slub.c:5413 [inline]
__kmalloc_node_track_caller_noprof+0x2db/0x820 mm/slub.c:5545
kvasprintf+0xbc/0x150 lib/kasprintf.c:25
kvasprintf_const+0x66/0x1a0 lib/kasprintf.c:49
kobject_set_name_vargs+0x5a/0x140 lib/kobject.c:274
dev_set_name+0xc7/0x100 drivers/base/core.c:3564
mmc_alloc_host+0x10a/0x930 drivers/mmc/core/host.c:542
devm_mmc_alloc_host+0x4b/0xb0 drivers/mmc/core/host.c:597
rtsx_usb_sdmmc_drv_probe+0x85/0x9a0 drivers/mmc/host/rtsx_usb_sdmmc.c:1391
platform_probe+0x106/0x1d0 drivers/base/platform.c:1507
call_driver_probe drivers/base/dd.c:628 [inline]
really_probe+0x241/0xa60 drivers/base/dd.c:706
__driver_probe_device+0x210/0x460 drivers/base/dd.c:868
driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
Memory state around the buggy address:
ffff8881082c7f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ffff8881082c7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff8881082c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff8881082c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8881082c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
final repro crashed as (corrupted=false):
=========
==================================================================
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
Read of size 1 at addr ffff8881082c8071 by task kworker/0:2/978
CPU: 0 UID: 0 PID: 978 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events rtsx_usb_ms_handle_req
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_address_description mm/kasan/report.c:378 [inline]
print_report+0x13d/0x4b0 mm/kasan/report.c:482
kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
rtsx_usb_ms_issue_cmd drivers/memstick/host/rtsx_usb_ms.c:486 [inline]
rtsx_usb_ms_handle_req+0x17ff/0x1a00 drivers/memstick/host/rtsx_usb_ms.c:531
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Allocated by task 44:
kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
__kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:415
kasan_kmalloc include/linux/kasan.h:263 [inline]
__kmalloc_cache_noprof+0x2d8/0x680 mm/slub.c:5563
_kmalloc_noprof include/linux/slab.h:991 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Freed by task 44:
kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
poison_slab_object mm/kasan/common.c:253 [inline]
__kasan_slab_free+0x43/0x70 mm/kasan/common.c:285
kasan_slab_free include/linux/kasan.h:235 [inline]
slab_free_hook mm/slub.c:2748 [inline]
slab_free mm/slub.c:6499 [inline]
kfree+0x20c/0x650 mm/slub.c:6792
memstick_alloc_card drivers/memstick/core/memstick.c:420 [inline]
memstick_check+0x72b/0x10d0 drivers/memstick/core/memstick.c:452
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
The buggy address belongs to the object at ffff8881082c8000
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 113 bytes inside of
freed 2048-byte region [ffff8881082c8000, ffff8881082c8800)
The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881082c9000 pfn:0x1082c8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x200000000000240(workingset|head|node=0|zone=2)
page_type: f5(slab)
raw: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
raw: ffff8881082c9000 0000000000080001 00000000f5000000 0000000000000000
head: 0200000000000240 ffff888100042000 ffff888100040948 ffff888100040948
head: ffff8881082c9000 0000000000080001 00000000f5000000 0000000000000000
head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 44, tgid 44 (kworker/u8:3), ts 87811495059
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
prep_new_page mm/page_alloc.c:1879 [inline]
get_page_from_freelist+0xf4b/0x3440 mm/page_alloc.c:3943
__alloc_frozen_pages_noprof+0x2d7/0x2f70 mm/page_alloc.c:5436
alloc_slab_page mm/slub.c:3347 [inline]
allocate_slab mm/slub.c:3462 [inline]
new_slab+0xa9/0x6e0 mm/slub.c:3513
refill_objects+0xe3/0x410 mm/slub.c:7410
refill_sheaf mm/slub.c:2885 [inline]
__pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
alloc_from_pcs mm/slub.c:4850 [inline]
slab_alloc_node mm/slub.c:4984 [inline]
__kmalloc_cache_noprof+0x4a1/0x680 mm/slub.c:5559
_kmalloc_noprof include/linux/slab.h:991 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
memstick_alloc_card drivers/memstick/core/memstick.c:383 [inline]
memstick_check+0x2c1/0x10d0 drivers/memstick/core/memstick.c:452
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 38 tgid 38 ts 87363331372 stack trace:
reset_page_owner include/linux/page_owner.h:26 [inline]
__free_pages_prepare mm/page_alloc.c:1418 [inline]
__free_frozen_pages+0x714/0xfc0 mm/page_alloc.c:2962
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x4e/0x70 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4683 [inline]
slab_alloc_node mm/slub.c:4996 [inline]
__do_kmalloc_node mm/slub.c:5413 [inline]
__kmalloc_node_track_caller_noprof+0x2db/0x820 mm/slub.c:5545
kvasprintf+0xbc/0x150 lib/kasprintf.c:25
kvasprintf_const+0x66/0x1a0 lib/kasprintf.c:49
kobject_set_name_vargs+0x5a/0x140 lib/kobject.c:274
dev_set_name+0xc7/0x100 drivers/base/core.c:3564
mmc_alloc_host+0x10a/0x930 drivers/mmc/core/host.c:542
devm_mmc_alloc_host+0x4b/0xb0 drivers/mmc/core/host.c:597
rtsx_usb_sdmmc_drv_probe+0x85/0x9a0 drivers/mmc/host/rtsx_usb_sdmmc.c:1391
platform_probe+0x106/0x1d0 drivers/base/platform.c:1507
call_driver_probe drivers/base/dd.c:628 [inline]
really_probe+0x241/0xa60 drivers/base/dd.c:706
__driver_probe_device+0x210/0x460 drivers/base/dd.c:868
driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
Memory state around the buggy address:
ffff8881082c7f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ffff8881082c7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff8881082c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff8881082c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8881082c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================