Extracting prog: 16m53.629889252s
Minimizing prog: 1h4m19.828995585s
Simplifying prog options: 0s
Extracting C: 1m27.101325554s
Simplifying C: 8m23.523457921s
extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40101101900001010203010902120001010080fa0904000000ffffff00"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341902120001010203010902270001010080320904000003ffffff00070581020002000705010200020007058203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000400)={0x0, 0x3, 0x8, {0x8, 0x3, 's\x00y\x00z\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x40, 0xc0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f00307020100000000010902200001010080320904000002080549000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [40, 11, 1, 3, 7, 10, 2, 1, 1, 1, 2, 22, 1, 11, 2, 1, 4, 4, 2, 12, 2, 1, 11, 2, 8, 14, 11, 1, 2, 2]
detailed listing:
executing program 0:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
write$char_usb(r0, &(0x7f0000000000)="f3e58c5b1761cd32595324fa124dae8aaf3affa924f089273ffde71ff1625d9bf13e0cfc6aab9e2663f785e479c384d2366f6b6d6e2be607911b711e1b1366f9fecc081f2edb97415de004603cac282b7574366a5fb82de5359e0abdcf4489e750adbf2d41940c35ff755013e483ddebf77c71763094734e359aaa9466d41faa498c0c63186147d704256185748c64ea25a5a06eacbcc24b4e7e6ba383a511", 0x9f)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x5, 0x420000) (async)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x5, 0x420000)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000100)={{0x3, 0x100, 0x80, 0x0, 0x400, 0x3ff}, 0x1fb, [0x6, 0x6, 0x6, 0x0, 0x9b9, 0xfffffffc, 0xc, 0x8, 0x1, 0x9, 0x9, 0x3, 0x3, 0x2, 0x7fff, 0x9, 0x0, 0xb3, 0xde9, 0xe, 0x6, 0x20000, 0x91c, 0x5, 0x0, 0x1, 0x7ff, 0xfffffff8, 0x5, 0x8, 0x0, 0x5, 0x3, 0x3, 0xff, 0x1, 0xd, 0x400, 0x5, 0x8, 0x2, 0x8, 0xae0f, 0x7, 0xd, 0x6, 0x7483, 0xfffffff8, 0x3, 0x7, 0x8001, 0x89, 0x2, 0xe, 0x5, 0xc5, 0x3, 0x5, 0xd, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x3, 0x617, 0x9, 0x1, 0xdd0, 0x75, 0x10c, 0x7, 0x4, 0x9, 0x1, 0x1, 0x400, 0xb, 0x5, 0x8, 0x401, 0x4, 0x5, 0x4, 0xffffff78, 0x8001, 0x6, 0xd87, 0x80000001, 0x2, 0x1, 0xffffff50, 0x1160, 0x4, 0xd3, 0xaffb, 0x9, 0x1ff, 0x5, 0x101, 0x6, 0xfffffffb, 0x7, 0x4, 0x1000, 0x86, 0x0, 0x5, 0x40, 0x0, 0x1, 0x2, 0x0, 0x6, 0x2, 0x2, 0x10, 0x5, 0x2, 0xd, 0x2, 0x7, 0x2, 0x7, 0x2, 0x100, 0x3, 0x4, 0xfffffffc, 0xe, 0x5, 0x7fff, 0x0, 0x2, 0x101, 0x1, 0xfff, 0x4, 0xfffffff8, 0xd, 0x3, 0x4, 0x8001, 0x1d3, 0x4, 0x4, 0xf, 0x4, 0x7fff, 0x8, 0x2, 0x4, 0xb5, 0xb06c0b6, 0x1000, 0x1, 0x6, 0x3, 0xe05385ab, 0x8, 0x7f, 0x3, 0x10000, 0xec, 0x4, 0xb76, 0x7a31, 0x2, 0x4a02, 0x1, 0x4f2, 0x4, 0x8, 0x6, 0x1, 0xffff9516, 0x8ad, 0x80, 0x3, 0x9, 0x3, 0xfffffd1f, 0x2aca, 0x1a6, 0x100, 0xb, 0x92d, 0x7, 0x2, 0x5, 0x8, 0x4, 0x80000000, 0xc, 0x9, 0x3c74, 0x92, 0x0, 0x8, 0x5, 0x7, 0x4, 0x0, 0x0, 0x4, 0x0, 0x70a2, 0xd06e, 0x1, 0x1, 0x0, 0x978, 0x1, 0x76999c83, 0x100, 0x8, 0x1, 0x3, 0x4, 0xffffffff, 0x6, 0x9, 0x7fffffff, 0x4, 0x58, 0x3d, 0xc9, 0x5, 0x7, 0x5be2, 0x8, 0x5, 0x7ff, 0x0, 0x9, 0xdf, 0x7, 0x7, 0x9, 0x5, 0x5, 0xfffffffd, 0x1aae, 0xb, 0x6, 0x8000, 0x142, 0x1, 0x2, 0x2, 0xfffffffd, 0x2, 0x10000, 0x6, 0x8, 0x0, 0x8001, 0x7fffffff, 0xb, 0x3, 0x3d, 0xc, 0x7, 0x5, 0x9, 0x3, 0x1ff, 0x9, 0x8, 0x48d, 0xffffffff, 0x4, 0x10, 0x40, 0x4, 0x8, 0x2, 0xa7400000, 0x5, 0x1, 0x5, 0x7fff, 0x2, 0xf8c, 0x4, 0x1, 0x6, 0x81, 0xaf85, 0x3, 0x10, 0x6, 0x2, 0x0, 0xe1e, 0x1a, 0x5, 0xffff, 0xc346, 0x2, 0x9, 0x4, 0x3, 0x10000, 0x7fffffff, 0x1, 0x1, 0x7, 0x6, 0x0, 0x8, 0x9, 0x8, 0x6, 0x3, 0x2, 0x8001, 0x4, 0x9, 0xaee5, 0x4, 0x2, 0x4d5, 0x1, 0x1, 0x1, 0x5, 0x1, 0xe0c3, 0xc, 0x1, 0x8ba, 0x8aa, 0x712a, 0x9, 0x5, 0x8, 0x200, 0x1, 0x3, 0x1, 0x6, 0x5b, 0x9, 0x9, 0x6, 0x0, 0x2, 0x9, 0x7, 0x1, 0x8, 0x2000, 0x1, 0x6, 0x7, 0x88b, 0x0, 0x7ff, 0xedc, 0x2, 0x7ff, 0x3, 0xfffffffa, 0x4, 0x1, 0x7, 0x4fb, 0x7, 0x5f38, 0x5c1, 0xa, 0x355, 0x1, 0x3, 0x2f, 0x101, 0x3ae, 0x6, 0x8, 0x2, 0x3, 0x2d, 0x9, 0x994d, 0xffff, 0x90a0, 0x7, 0x18eb, 0x2, 0x8, 0x1, 0x6a8, 0xcb, 0x2, 0x8, 0x8, 0x9, 0x7, 0x100, 0x8000, 0x2, 0x6, 0x9, 0x7, 0xffff0001, 0x2, 0x81, 0xc, 0x6, 0x4, 0xf, 0xa, 0x1, 0x8, 0x3, 0x3, 0xe6, 0x0, 0x9, 0x8, 0xfffffff8, 0x53c7, 0x7ff, 0x400, 0x9, 0x507, 0xa, 0x0, 0x0, 0x51, 0x78ac771f, 0x81, 0x4, 0x5e, 0x8, 0xe, 0x6, 0x9, 0x1, 0xffff5256, 0x5e, 0x1, 0x5, 0xeb95, 0x1, 0xf, 0xf7, 0x0, 0x7df6, 0xfffff000, 0x2, 0x8, 0x12, 0x8, 0x0, 0x3, 0xa8, 0x0, 0x800, 0x7, 0x5cc4, 0x200, 0xffff, 0x40, 0x81, 0xc2e9, 0x5, 0x8f1, 0x10000, 0x7, 0x6, 0x80000000, 0x1, 0x100, 0x4, 0xb364, 0x7, 0x7, 0x2, 0x4, 0x3, 0x535, 0x0, 0xffffffff, 0x9, 0xad20, 0x3, 0x80000000, 0x7, 0x6f3d, 0x6c, 0x1, 0x6, 0x9, 0x0, 0x5, 0xcb70, 0x400, 0x4, 0x6, 0xfffffe8b, 0x6, 0x3, 0xfffffff8, 0x7fff, 0x8, 0x80000000, 0x8, 0x9, 0x6, 0x9, 0x3, 0x6, 0x0, 0x9, 0x4, 0xc386, 0xfa, 0x8, 0xb2fe, 0x40, 0x1000, 0x1, 0x80000000, 0xa2, 0x8, 0x1, 0x81, 0xf7, 0x0, 0x3, 0x62f2, 0x2b4, 0x0, 0x9, 0x5, 0x48, 0x3ff, 0x0, 0x0, 0xd4b, 0x8000, 0x1000, 0x2, 0x7, 0x5, 0x335, 0x7, 0x800, 0x7f, 0x4, 0x5, 0x1, 0x6, 0x5, 0x2, 0x9, 0x1ff, 0x3, 0x3, 0xfffffffb, 0xfffffff8, 0xbb87, 0x86, 0x6, 0x4, 0x8, 0x7ff, 0x7, 0x99, 0x2, 0x5, 0x101, 0x3, 0x8000, 0x7fff, 0x1, 0xb, 0x2, 0xbc9, 0x4, 0x9, 0x1, 0x7, 0x8000, 0xfffff7ef, 0x2, 0xd81, 0x8, 0x5, 0xaa8, 0x5, 0x5, 0x5, 0x6, 0xe, 0x101, 0xfffffffc, 0x3, 0x8, 0x6, 0x6, 0xfffffff4, 0x2, 0x2, 0x9152, 0xfd8e, 0x9, 0x4, 0x8, 0x8, 0x7, 0x2, 0x9, 0x4, 0x4, 0x6, 0x2, 0x0, 0x8, 0x5, 0x5, 0x7, 0x1, 0x2, 0x4, 0x7fff, 0x5, 0x2, 0x10000, 0x0, 0xd, 0x7, 0x8, 0x8, 0x7, 0xff, 0x4741bb17, 0x1, 0x3, 0x0, 0x1, 0x9, 0x6, 0xa5, 0x9, 0x1, 0x5, 0x5, 0x19a, 0xfffffffc, 0x1, 0x0, 0x9, 0x3, 0x2, 0x200, 0x4, 0x9, 0xffff8001, 0x3, 0x7, 0x8, 0x1, 0x3a, 0x1000, 0x6, 0x7, 0x8, 0x4f70, 0x3, 0x8, 0x2, 0xcd41, 0xfffffffd, 0x9, 0x6, 0x10001, 0x1, 0x3, 0x200, 0x8000, 0x8, 0x77, 0x4, 0x5b, 0x2, 0xffffffff, 0x100, 0x2, 0x7, 0x0, 0xfff, 0x5, 0x10, 0xffff, 0x7f, 0x3, 0x9, 0x3, 0x100, 0x8, 0x56, 0xf, 0x4, 0x8, 0x2, 0x1, 0xfffffffe, 0x6, 0x6, 0xc, 0x8000, 0x0, 0xfffffffb, 0xc3, 0xfff, 0x9cf, 0x101, 0x82, 0x7, 0xff, 0x9704, 0xa5e9, 0x7, 0x0, 0x6, 0x29, 0x8, 0x9, 0x7, 0x2, 0x9, 0x767b, 0x432, 0x6, 0x2a, 0x0, 0x10000, 0x1, 0xb, 0x5, 0x54, 0x401, 0x5, 0x10, 0x2, 0x1, 0xc3b, 0xd, 0x1, 0x8001, 0x0, 0x81, 0x7, 0x1, 0xca73, 0xfffffffc, 0x2, 0x8, 0x1ff, 0x2a3b, 0xffffff36, 0x3, 0x8, 0x1, 0x8, 0xfffffffb, 0x6fc, 0xfffffffa, 0x4, 0x40, 0x639d, 0x3ff, 0x0, 0x0, 0x3, 0x7, 0x9, 0x5, 0x9, 0xfe, 0x7fff, 0x4, 0x80000000, 0x4, 0xf, 0x80000000, 0xfffffffe, 0x3, 0x6, 0x68a, 0x4, 0x600000, 0x2, 0xa, 0xd2, 0xb, 0x1, 0x7, 0x5, 0xfffffffe, 0x3, 0x6, 0x40, 0x200, 0x3, 0x0, 0x80000, 0x4, 0x3, 0x1, 0x1, 0x5, 0x800, 0x7, 0x3, 0x19, 0x8000, 0xb46, 0x4, 0x4017, 0x10001, 0xd5ff, 0xfffffe01, 0x0, 0xc2f2, 0x6, 0x677, 0x9, 0x74, 0x9, 0x10, 0xbb, 0x46, 0x3, 0x7fff, 0x3, 0x5, 0x0, 0x4ab, 0xbc, 0xd, 0x9, 0x8001, 0xfffffff4, 0x5, 0x2, 0x7ff, 0x3, 0x3ff, 0xedb, 0xeea, 0xcb, 0x10, 0x80, 0x2, 0x401, 0x0, 0x1, 0x5, 0x7ff, 0xe20e, 0x7fffffff, 0x5, 0x86e3, 0xffffffff, 0x6, 0x4, 0x8, 0x0, 0x19e, 0x0, 0x9, 0x0, 0x8, 0x1000, 0x8, 0x99a, 0xf, 0x9, 0xfffffffc, 0x12, 0x6, 0x3ff, 0x4cca, 0x4, 0x8000, 0x0, 0x9, 0x70c280, 0x2, 0x3, 0x10, 0x0, 0x7, 0x8, 0xdf, 0x8, 0x4, 0x5, 0xb055, 0xfffffff4, 0x3, 0xd, 0x0, 0x0, 0x3, 0xfffffff9, 0x1000, 0xc4cd, 0x6, 0x3ff, 0x8, 0xa5, 0xbb73, 0x9, 0x2, 0x4, 0x8000, 0xffff0001, 0x8001, 0x6b2, 0x6, 0x2, 0x6, 0x4, 0x1, 0xe, 0x1, 0x7, 0x0, 0x9, 0x6, 0x6, 0x1, 0xfffffffc, 0x40, 0x1, 0x0, 0x2fc, 0x8, 0x9, 0x272875a6, 0xb, 0x5, 0x8, 0x0, 0x8000, 0x2, 0x1, 0x6, 0x4, 0x4, 0x2, 0x0, 0xffffff6b, 0x7fffffff, 0x3, 0x1, 0x4, 0x3, 0x6, 0xf89, 0x8, 0xe0, 0xffffffff, 0x6ac78000, 0xb5d, 0x3, 0x8, 0x200, 0x6, 0x4, 0x0, 0x3, 0xd, 0x51, 0x4000000, 0x3, 0xb57, 0x7, 0x7fff, 0x8, 0xffffffff, 0x43d3, 0x1, 0xc, 0x1, 0x3, 0x4, 0x8, 0x3, 0xe27, 0x8, 0x101, 0x3, 0x9, 0x3, 0x5, 0x1ff, 0x80000000, 0xfffffff7, 0xfffffffa, 0x4, 0x3ff, 0x1d, 0x8, 0x3, 0x9, 0x5, 0x5, 0x3, 0x1ff, 0x8, 0x8f, 0x6, 0x2, 0x8, 0xffff096b, 0x10, 0x2c]}) (async)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000100)={{0x3, 0x100, 0x80, 0x0, 0x400, 0x3ff}, 0x1fb, [0x6, 0x6, 0x6, 0x0, 0x9b9, 0xfffffffc, 0xc, 0x8, 0x1, 0x9, 0x9, 0x3, 0x3, 0x2, 0x7fff, 0x9, 0x0, 0xb3, 0xde9, 0xe, 0x6, 0x20000, 0x91c, 0x5, 0x0, 0x1, 0x7ff, 0xfffffff8, 0x5, 0x8, 0x0, 0x5, 0x3, 0x3, 0xff, 0x1, 0xd, 0x400, 0x5, 0x8, 0x2, 0x8, 0xae0f, 0x7, 0xd, 0x6, 0x7483, 0xfffffff8, 0x3, 0x7, 0x8001, 0x89, 0x2, 0xe, 0x5, 0xc5, 0x3, 0x5, 0xd, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x3, 0x617, 0x9, 0x1, 0xdd0, 0x75, 0x10c, 0x7, 0x4, 0x9, 0x1, 0x1, 0x400, 0xb, 0x5, 0x8, 0x401, 0x4, 0x5, 0x4, 0xffffff78, 0x8001, 0x6, 0xd87, 0x80000001, 0x2, 0x1, 0xffffff50, 0x1160, 0x4, 0xd3, 0xaffb, 0x9, 0x1ff, 0x5, 0x101, 0x6, 0xfffffffb, 0x7, 0x4, 0x1000, 0x86, 0x0, 0x5, 0x40, 0x0, 0x1, 0x2, 0x0, 0x6, 0x2, 0x2, 0x10, 0x5, 0x2, 0xd, 0x2, 0x7, 0x2, 0x7, 0x2, 0x100, 0x3, 0x4, 0xfffffffc, 0xe, 0x5, 0x7fff, 0x0, 0x2, 0x101, 0x1, 0xfff, 0x4, 0xfffffff8, 0xd, 0x3, 0x4, 0x8001, 0x1d3, 0x4, 0x4, 0xf, 0x4, 0x7fff, 0x8, 0x2, 0x4, 0xb5, 0xb06c0b6, 0x1000, 0x1, 0x6, 0x3, 0xe05385ab, 0x8, 0x7f, 0x3, 0x10000, 0xec, 0x4, 0xb76, 0x7a31, 0x2, 0x4a02, 0x1, 0x4f2, 0x4, 0x8, 0x6, 0x1, 0xffff9516, 0x8ad, 0x80, 0x3, 0x9, 0x3, 0xfffffd1f, 0x2aca, 0x1a6, 0x100, 0xb, 0x92d, 0x7, 0x2, 0x5, 0x8, 0x4, 0x80000000, 0xc, 0x9, 0x3c74, 0x92, 0x0, 0x8, 0x5, 0x7, 0x4, 0x0, 0x0, 0x4, 0x0, 0x70a2, 0xd06e, 0x1, 0x1, 0x0, 0x978, 0x1, 0x76999c83, 0x100, 0x8, 0x1, 0x3, 0x4, 0xffffffff, 0x6, 0x9, 0x7fffffff, 0x4, 0x58, 0x3d, 0xc9, 0x5, 0x7, 0x5be2, 0x8, 0x5, 0x7ff, 0x0, 0x9, 0xdf, 0x7, 0x7, 0x9, 0x5, 0x5, 0xfffffffd, 0x1aae, 0xb, 0x6, 0x8000, 0x142, 0x1, 0x2, 0x2, 0xfffffffd, 0x2, 0x10000, 0x6, 0x8, 0x0, 0x8001, 0x7fffffff, 0xb, 0x3, 0x3d, 0xc, 0x7, 0x5, 0x9, 0x3, 0x1ff, 0x9, 0x8, 0x48d, 0xffffffff, 0x4, 0x10, 0x40, 0x4, 0x8, 0x2, 0xa7400000, 0x5, 0x1, 0x5, 0x7fff, 0x2, 0xf8c, 0x4, 0x1, 0x6, 0x81, 0xaf85, 0x3, 0x10, 0x6, 0x2, 0x0, 0xe1e, 0x1a, 0x5, 0xffff, 0xc346, 0x2, 0x9, 0x4, 0x3, 0x10000, 0x7fffffff, 0x1, 0x1, 0x7, 0x6, 0x0, 0x8, 0x9, 0x8, 0x6, 0x3, 0x2, 0x8001, 0x4, 0x9, 0xaee5, 0x4, 0x2, 0x4d5, 0x1, 0x1, 0x1, 0x5, 0x1, 0xe0c3, 0xc, 0x1, 0x8ba, 0x8aa, 0x712a, 0x9, 0x5, 0x8, 0x200, 0x1, 0x3, 0x1, 0x6, 0x5b, 0x9, 0x9, 0x6, 0x0, 0x2, 0x9, 0x7, 0x1, 0x8, 0x2000, 0x1, 0x6, 0x7, 0x88b, 0x0, 0x7ff, 0xedc, 0x2, 0x7ff, 0x3, 0xfffffffa, 0x4, 0x1, 0x7, 0x4fb, 0x7, 0x5f38, 0x5c1, 0xa, 0x355, 0x1, 0x3, 0x2f, 0x101, 0x3ae, 0x6, 0x8, 0x2, 0x3, 0x2d, 0x9, 0x994d, 0xffff, 0x90a0, 0x7, 0x18eb, 0x2, 0x8, 0x1, 0x6a8, 0xcb, 0x2, 0x8, 0x8, 0x9, 0x7, 0x100, 0x8000, 0x2, 0x6, 0x9, 0x7, 0xffff0001, 0x2, 0x81, 0xc, 0x6, 0x4, 0xf, 0xa, 0x1, 0x8, 0x3, 0x3, 0xe6, 0x0, 0x9, 0x8, 0xfffffff8, 0x53c7, 0x7ff, 0x400, 0x9, 0x507, 0xa, 0x0, 0x0, 0x51, 0x78ac771f, 0x81, 0x4, 0x5e, 0x8, 0xe, 0x6, 0x9, 0x1, 0xffff5256, 0x5e, 0x1, 0x5, 0xeb95, 0x1, 0xf, 0xf7, 0x0, 0x7df6, 0xfffff000, 0x2, 0x8, 0x12, 0x8, 0x0, 0x3, 0xa8, 0x0, 0x800, 0x7, 0x5cc4, 0x200, 0xffff, 0x40, 0x81, 0xc2e9, 0x5, 0x8f1, 0x10000, 0x7, 0x6, 0x80000000, 0x1, 0x100, 0x4, 0xb364, 0x7, 0x7, 0x2, 0x4, 0x3, 0x535, 0x0, 0xffffffff, 0x9, 0xad20, 0x3, 0x80000000, 0x7, 0x6f3d, 0x6c, 0x1, 0x6, 0x9, 0x0, 0x5, 0xcb70, 0x400, 0x4, 0x6, 0xfffffe8b, 0x6, 0x3, 0xfffffff8, 0x7fff, 0x8, 0x80000000, 0x8, 0x9, 0x6, 0x9, 0x3, 0x6, 0x0, 0x9, 0x4, 0xc386, 0xfa, 0x8, 0xb2fe, 0x40, 0x1000, 0x1, 0x80000000, 0xa2, 0x8, 0x1, 0x81, 0xf7, 0x0, 0x3, 0x62f2, 0x2b4, 0x0, 0x9, 0x5, 0x48, 0x3ff, 0x0, 0x0, 0xd4b, 0x8000, 0x1000, 0x2, 0x7, 0x5, 0x335, 0x7, 0x800, 0x7f, 0x4, 0x5, 0x1, 0x6, 0x5, 0x2, 0x9, 0x1ff, 0x3, 0x3, 0xfffffffb, 0xfffffff8, 0xbb87, 0x86, 0x6, 0x4, 0x8, 0x7ff, 0x7, 0x99, 0x2, 0x5, 0x101, 0x3, 0x8000, 0x7fff, 0x1, 0xb, 0x2, 0xbc9, 0x4, 0x9, 0x1, 0x7, 0x8000, 0xfffff7ef, 0x2, 0xd81, 0x8, 0x5, 0xaa8, 0x5, 0x5, 0x5, 0x6, 0xe, 0x101, 0xfffffffc, 0x3, 0x8, 0x6, 0x6, 0xfffffff4, 0x2, 0x2, 0x9152, 0xfd8e, 0x9, 0x4, 0x8, 0x8, 0x7, 0x2, 0x9, 0x4, 0x4, 0x6, 0x2, 0x0, 0x8, 0x5, 0x5, 0x7, 0x1, 0x2, 0x4, 0x7fff, 0x5, 0x2, 0x10000, 0x0, 0xd, 0x7, 0x8, 0x8, 0x7, 0xff, 0x4741bb17, 0x1, 0x3, 0x0, 0x1, 0x9, 0x6, 0xa5, 0x9, 0x1, 0x5, 0x5, 0x19a, 0xfffffffc, 0x1, 0x0, 0x9, 0x3, 0x2, 0x200, 0x4, 0x9, 0xffff8001, 0x3, 0x7, 0x8, 0x1, 0x3a, 0x1000, 0x6, 0x7, 0x8, 0x4f70, 0x3, 0x8, 0x2, 0xcd41, 0xfffffffd, 0x9, 0x6, 0x10001, 0x1, 0x3, 0x200, 0x8000, 0x8, 0x77, 0x4, 0x5b, 0x2, 0xffffffff, 0x100, 0x2, 0x7, 0x0, 0xfff, 0x5, 0x10, 0xffff, 0x7f, 0x3, 0x9, 0x3, 0x100, 0x8, 0x56, 0xf, 0x4, 0x8, 0x2, 0x1, 0xfffffffe, 0x6, 0x6, 0xc, 0x8000, 0x0, 0xfffffffb, 0xc3, 0xfff, 0x9cf, 0x101, 0x82, 0x7, 0xff, 0x9704, 0xa5e9, 0x7, 0x0, 0x6, 0x29, 0x8, 0x9, 0x7, 0x2, 0x9, 0x767b, 0x432, 0x6, 0x2a, 0x0, 0x10000, 0x1, 0xb, 0x5, 0x54, 0x401, 0x5, 0x10, 0x2, 0x1, 0xc3b, 0xd, 0x1, 0x8001, 0x0, 0x81, 0x7, 0x1, 0xca73, 0xfffffffc, 0x2, 0x8, 0x1ff, 0x2a3b, 0xffffff36, 0x3, 0x8, 0x1, 0x8, 0xfffffffb, 0x6fc, 0xfffffffa, 0x4, 0x40, 0x639d, 0x3ff, 0x0, 0x0, 0x3, 0x7, 0x9, 0x5, 0x9, 0xfe, 0x7fff, 0x4, 0x80000000, 0x4, 0xf, 0x80000000, 0xfffffffe, 0x3, 0x6, 0x68a, 0x4, 0x600000, 0x2, 0xa, 0xd2, 0xb, 0x1, 0x7, 0x5, 0xfffffffe, 0x3, 0x6, 0x40, 0x200, 0x3, 0x0, 0x80000, 0x4, 0x3, 0x1, 0x1, 0x5, 0x800, 0x7, 0x3, 0x19, 0x8000, 0xb46, 0x4, 0x4017, 0x10001, 0xd5ff, 0xfffffe01, 0x0, 0xc2f2, 0x6, 0x677, 0x9, 0x74, 0x9, 0x10, 0xbb, 0x46, 0x3, 0x7fff, 0x3, 0x5, 0x0, 0x4ab, 0xbc, 0xd, 0x9, 0x8001, 0xfffffff4, 0x5, 0x2, 0x7ff, 0x3, 0x3ff, 0xedb, 0xeea, 0xcb, 0x10, 0x80, 0x2, 0x401, 0x0, 0x1, 0x5, 0x7ff, 0xe20e, 0x7fffffff, 0x5, 0x86e3, 0xffffffff, 0x6, 0x4, 0x8, 0x0, 0x19e, 0x0, 0x9, 0x0, 0x8, 0x1000, 0x8, 0x99a, 0xf, 0x9, 0xfffffffc, 0x12, 0x6, 0x3ff, 0x4cca, 0x4, 0x8000, 0x0, 0x9, 0x70c280, 0x2, 0x3, 0x10, 0x0, 0x7, 0x8, 0xdf, 0x8, 0x4, 0x5, 0xb055, 0xfffffff4, 0x3, 0xd, 0x0, 0x0, 0x3, 0xfffffff9, 0x1000, 0xc4cd, 0x6, 0x3ff, 0x8, 0xa5, 0xbb73, 0x9, 0x2, 0x4, 0x8000, 0xffff0001, 0x8001, 0x6b2, 0x6, 0x2, 0x6, 0x4, 0x1, 0xe, 0x1, 0x7, 0x0, 0x9, 0x6, 0x6, 0x1, 0xfffffffc, 0x40, 0x1, 0x0, 0x2fc, 0x8, 0x9, 0x272875a6, 0xb, 0x5, 0x8, 0x0, 0x8000, 0x2, 0x1, 0x6, 0x4, 0x4, 0x2, 0x0, 0xffffff6b, 0x7fffffff, 0x3, 0x1, 0x4, 0x3, 0x6, 0xf89, 0x8, 0xe0, 0xffffffff, 0x6ac78000, 0xb5d, 0x3, 0x8, 0x200, 0x6, 0x4, 0x0, 0x3, 0xd, 0x51, 0x4000000, 0x3, 0xb57, 0x7, 0x7fff, 0x8, 0xffffffff, 0x43d3, 0x1, 0xc, 0x1, 0x3, 0x4, 0x8, 0x3, 0xe27, 0x8, 0x101, 0x3, 0x9, 0x3, 0x5, 0x1ff, 0x80000000, 0xfffffff7, 0xfffffffa, 0x4, 0x3ff, 0x1d, 0x8, 0x3, 0x9, 0x5, 0x5, 0x3, 0x1ff, 0x8, 0x8f, 0x6, 0x2, 0x8, 0xffff096b, 0x10, 0x2c]})
syz_open_dev$hiddev(&(0x7f0000001140), 0xffff, 0x8000) (async)
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0xffff, 0x8000)
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000001180)={0x2, 0x100, 0xbd, 0x80000001, 0xfea})
syz_open_dev$char_usb(0xc, 0xb4, 0x3) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
r4 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x200)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000001200)={0x3, 0xffffffff, 0x38000000, 0x8, 0x7, 0xff})
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000001280)={0x0, 0x25, &(0x7f0000001240)="c9dab4146cacd1b49cb8a9ff2080f19547ad154ec5844425337631a58bc2d4df9326d669a9"}) (async)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000001280)={0x0, 0x25, &(0x7f0000001240)="c9dab4146cacd1b49cb8a9ff2080f19547ad154ec5844425337631a58bc2d4df9326d669a9"})
write$char_usb(r0, &(0x7f00000012c0)="c7df747e692eda759e317923dc5b2b41afe0029eb0c3816cbdd0728a21459c96cad587d467b1b58404b85135e6586b4cb54477d326cd9c008bf6e0f94fdce2f8e1e18435ceea3a5bf35c7889c94cdebec703ba82d314246c0e16a57bf3fc491c91ed24612953fb42a4806960737a6ce382a0463dbc10f1939b0e666a85bb4a5d8bf476c362ae01028377b78047b8ec0652b483c5e3b6685c4200e46fb3ef9d604f7d03f781224d4b524e4a71958e1e8f9acbb3bf0ebd26b5595d6633d49556e3363ac5958312f433ac92b5cbbd3fc595", 0xd0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000013c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1a, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7f, 0xf1, 0x1, {0x22, 0xc8b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xb0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xfb, 0xe7, 0xd}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x110, 0x2, 0x0, 0xcd, 0x10, 0x7a}, 0x29, &(0x7f0000001440)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf, 0x27c, [0xff5fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x43, "b501eb41e89d7440d7daf421b5b760ec"}]}, 0x7, [{0x6c, &(0x7f0000001480)=@string={0x6c, 0x3, "7b1472081dfd69ab03567775c3329e995cf9ff04d96fd32f790f6382a536a1bfddf4d628677cc34ebbe76cffa197d6d864e1d572ce7a568e5aec64e59666900399fc98370020845a59773d43ceaac33e55500857b4f2025ea17f4570844b73f91c847ce0583a7a2e3cd4"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0xc1a}}, {0x2f, &(0x7f0000001580)=@string={0x2f, 0x3, "afa60020499b9cf73e51ec00f8fec5eeedd2fd5aa92777f493c3b5a744710c84f6ad9b960866b9d140cc7cabff"}}, {0xce, &(0x7f00000015c0)=@string={0xce, 0x3, "8af6e966588109a81b6a7b12a9610d0be61136e60a9a4713bb718ccd4570b73b895395b214e60b2dd6233d481ab6fb01797806ba8cac1303c578fabf58813e31757ffe8247f1296ba1882cf2069065e154688fa79587504e08fafb213880152c7ac29a071fb20351fc5c2af5244f1e2ec93a2ddd1f749e7eccacefa23abe5132719186cff189f00a4e8a6546f6178f017af52a2556f1343f97b66bc8b1b19053f07076daca1223b864b9d7fd95c5538096bfbe03ff1536264eda84a40056ff99ec5a9202ac8e24b95af9fc2d"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x1d, &(0x7f0000001700)=@string={0x1d, 0x3, "5deb0f24763d4a01b6e7e019adb145ce0188a896861cbf9b204704"}}]}) (async)
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000013c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1a, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7f, 0xf1, 0x1, {0x22, 0xc8b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xb0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xfb, 0xe7, 0xd}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x110, 0x2, 0x0, 0xcd, 0x10, 0x7a}, 0x29, &(0x7f0000001440)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf, 0x27c, [0xff5fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x43, "b501eb41e89d7440d7daf421b5b760ec"}]}, 0x7, [{0x6c, &(0x7f0000001480)=@string={0x6c, 0x3, "7b1472081dfd69ab03567775c3329e995cf9ff04d96fd32f790f6382a536a1bfddf4d628677cc34ebbe76cffa197d6d864e1d572ce7a568e5aec64e59666900399fc98370020845a59773d43ceaac33e55500857b4f2025ea17f4570844b73f91c847ce0583a7a2e3cd4"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0xc1a}}, {0x2f, &(0x7f0000001580)=@string={0x2f, 0x3, "afa60020499b9cf73e51ec00f8fec5eeedd2fd5aa92777f493c3b5a744710c84f6ad9b960866b9d140cc7cabff"}}, {0xce, &(0x7f00000015c0)=@string={0xce, 0x3, "8af6e966588109a81b6a7b12a9610d0be61136e60a9a4713bb718ccd4570b73b895395b214e60b2dd6233d481ab6fb01797806ba8cac1303c578fabf58813e31757ffe8247f1296ba1882cf2069065e154688fa79587504e08fafb213880152c7ac29a071fb20351fc5c2af5244f1e2ec93a2ddd1f749e7eccacefa23abe5132719186cff189f00a4e8a6546f6178f017af52a2556f1343f97b66bc8b1b19053f07076daca1223b864b9d7fd95c5538096bfbe03ff1536264eda84a40056ff99ec5a9202ac8e24b95af9fc2d"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x1d, &(0x7f0000001700)=@string={0x1d, 0x3, "5deb0f24763d4a01b6e7e019adb145ce0188a896861cbf9b204704"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000001980)={0x24, &(0x7f00000017c0)={0x0, 0x2a, 0x6b, {0x6b, 0x30, "91e6578051fb7d7c7419bde0d14e88f87d513131a4838bd49880fbaf0389269f8bdbbfc44b6759056e742d87e479ee539aed0ec4e6d4017203ba5aee6f6a29aaf1bb4437cd6a26547bd39ed7ae8e49e5d7bc9aa3504b9e729df8c74972fff2468bf8eed49ad6f27b8e"}}, &(0x7f0000001840)={0x0, 0x3, 0xae, @string={0xae, 0x3, "65b819ec6b46c3205f5acbdb7dbf247c41e9dff347d3a7ddf796d379f3ca05bdd5ad730b922e3b8030f716663e8fa9806f9060e96768f040f68ea666648e372a6dd7d46640c9aaf70b82f1a199722f2652b4f37830d00ffc6f00c9a46b6b1990836078f17bdd37fafa38d342a4c1cce49645b7a18f10d444ff4318d5d29b8440ce863c43f579bf4113f93d38260d8c4d784d398737db55fa6b0960c75de718cbe0fd000c1593551f4af44524"}}, &(0x7f0000001900)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "a5a4d470"}]}}, &(0x7f0000001940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x17f}}}}, &(0x7f0000001c00)={0x2c, &(0x7f00000019c0)={0x20, 0x6, 0xd5, "09d9bc8c9abaeb162873b28db8c2c3548cacfcdd47f3190a5c8f39caa68a6282857c383fda04e38bc08cfcb02a5eed6ca48f75c102d6817faed2cfe86cc03b2719e777ef81859d7700426131794927dc79ddc4a25e6c8de9c8b403707482a40fd78c9db78d98a37c90c8e0ff93e3b3dbfdad5969b58a945562fc23846f92e425e9a26640173edc15f4eeb2c96241a1833ef1529476baa3f5ca5790807c582c24208fc476e35982505ef76931e30045bbd90d2bf88bff3e17cb1c0196760f7e0016f9536f4d5c66d11c4e8f87d0c7b08d6eb6eeec16"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001b40)={0x20, 0x1, 0x4f, "bde87bc9b8104604fa8556e9a372bd20d0870b48b9be98ce7cc2dc36eae421ade1e2e0a60cfe7d2700f797c06ea451da9a5fb1a70fcb32deb4403fc9a56adcae957c1188aec06a6e2a15371b0678e7"}, &(0x7f0000001bc0)={0x20, 0x3, 0x1, 0x6}})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
write$char_usb(r3, &(0x7f0000001cc0)="7c9c51edb573c1844ea7c1bf2117adcf53e6298c8bea0789b7b5996ad52e69b38359c7f7f04c6e4f6769478ff13ff0c52025649480c6f5e836867140393756b7e41c9a33905168d5eabebcfd88243b87cd542064c813b0475ed12223f6d3624071b930b66d15eb315dca406d1b01f2b893c59f73af1ac5957e6096cd37b05613215a05a6c57240ffa501949c89252ef86464dcf3532d336a48211a49fac86fbf760d42609e0d488caf38581090bc196f11f2aefa592f1a2d44d9d2226b01f888cc8b69a67b5db2b4245f87fefe3485eda4034dec15336be6d2a24113ceeaa7507eb1e832ed49226765f8574453ba1fbf827f463f9df89ac00ee60551accb88e65fdd204a01d6bb1a493e5cc237fb28532bc38f6af71202fa4ef5312342a794e50f2eea0d184b760439e21386d77abedf75852f48769f1f3d37d42a83b60b2768b4a1ab020b80085619afcf991db2151b5a4289271d58056c465e41610d5fb0d83e5becc3e059dc9146f2b4d6fff481bbaa2744c50bcf120fb6cd5d249304a358f8aa037b88a409785fe1a1375075a2a9a89815a89c8fcad080225ac1c1a9b4f36f48be5f43b1249c9c2c225f04d4d69ab8010d8078692a49222547d711a6b56cde5e4e14cc767eaab514a183afdab7e774e2cd7b6d8988d610c7ed7459b4f528feb3c03667deec7c2cd69cc66ab88e1a0e9e816f3d3602e10034741a208aa403e1306029204304983d35e6fde96d392c383a7780fba8e5874c28f39c0100a09330da590b7c7fc0c365bd1f475a5dad0ccd529115912fe6c2c53474ca79b1947cdb1c02f41d903b00d20715ec32e1df69ce138c594a733d8ff018923e15740091b7ab2f3f9bdedc5413071e6378bb2f04bf67e877aee8e29446e05d8a0468a80414711e35117a1f7979fd5c4f6484c9c37e5d3f83427d8c3ffed122da6fa72d86c642cca5fa0464b48f3c1fe2e5fc3082478fac8772f4f9836dbf50193366144854e9b77a96649a8814639363d8035f48327dd1fd2f920cfc0a4be2d83406edd941798993edae882ed7a564779987ac598ddaa614639b49359e471f978fda77042750fe207d85c2b219584405d639f9b6f58f2bba593b714872105852fee2f505b8a1e0f3deae5c0ae6d426f1d187ee45977ec76e3fe8669365a6d1ee3102ae2bbeb6857e5eb3964cba1d78c884987117fb225c9fecb75049e7d758c2b7bac83f46ef5d8d30068e87ce4cdac9393ec82c54471627519dd92b49452a610a0da03e32aa7400c225ec1c7659663504c3481e8a44ba95d431b8574ea381135a8bec7e65295f4a044ad4a5efcd6a3f8d84c288c94f69e9fdff70ab13d19e2d4295d56edd34538ce04f85407621954f0db422be6f98aec34aa8735155728826677c5c57f336f95aa1390a6bddab83334ed6b0957157222523b87f0951316626214d7b1ba14c3aeac58737e661c0a7246b6674300535d17689a8cfe4d7612f55ac8ca6d71443a3f830d7e5265d1493082db6c969e8861d4e7c67846dd2d44880a5c6afecf858b42f4d2c649269026d3ca6c01cbcc94026c3b4619497802f379952299b52485c4b7de3f1508d7fced5422ff0e60079be705936158ddbb0c1e8dccad9d2f907ad5392a712603ee8698c85beb8196e91c4bf052fa9e7b150eb24e0e79940233a8c38d7260f318a5e638fb3f439f4ba91f182a9be42d9c5be810c80b48e157933f98e04c8da5384b2323416e8729994d6c6ac0175c3e3cc20d4ab9ab8b6b836308ecdc03d6922ec4eb1c2ecaa3140dab432b93bd82e78093d0085f2da7c5c76d73dfc1c2a876c0e4571144b2251cfc2ab4dd3acdfbf0ba4a5b1d9da8b7faec919bdaf68db2430e4486bc408590bd5d855e641d38a3dd3ef7240edc70f1a8f0be372190bfc05955c12364be108521f3dc79f6c17ca966103da8999fd161dc4440dc860a3487713adf0c5340dd34cdf90e17416a4b8543ac29dd721d42424f69fa25ab14e07922074afd7b2b963b81e6977ce1b927a0da5c6e5b957be876de4d82416421eb9c6f5a2cec9b3a97858b13c45972c258e76591962b726466ebc783baaef7eb2af4dc9a711994b45bf7cba69c14a20e0a2a1059dc9dc933f2389b0cc3e4bc66e2661df59268709b05e00d4437aea23a2f1f5c1708fd0c51c7797afa504147dbe85acd468d7a83f13769d0425c64127fa1c9b3280e0e39e57e1f7c0adf7fedab4fc65ff81c63b00e78ead3e1e61c880f9114e758557d0912b84b562c80e4e40e30c94a8b19bf5733c9ebfaf006206983cc37c0ee68d795d6d2f836dc189018a329f017dc3c381ae04638b4eca7ade3fea4c185ceb0e201be0997924f4d4856c477c9d7b98d731df4e8aed8edf25bfa92db58b00f348f857587f13a517c12bfd68bfdfa00fc853f5fd7ea429ae184bd9f77f4d5d76d1066306d314aaf99891140f16de04d8e737f9553754bdf2f91a48b4c83d287a68fa75161f9175c11714ddc7f203e0ed06556152f83df74290fd50f6180e1330444a67f04a9e240fcfb3c24ab2237f1fd41f83ba566c52419687be3c015f7292e9e328f4a18c17371e5546efd46f1fe5b215fa86c97a8c9773a3004f77df311f5571d5b99e47e46fac2f88bd63333ac43719bc3c5dc49017fbc8891811859ee5b221e84eb8fa36873e5f23c2c42f8b5458a2c47fbeff46190f5dae69f1aba623759d5b39841254678829471a0e7cfda456d22874eb6e5279da1659f684508dedd8c4f9ef6819f872513fcaa6334be7132a94da5faa9f506cb62d43c7ff20e27a9862500c1b43e9367779ef226f93fb4e3c06133652b2a58c6daf36cc6351a1a2b0090b1d7a2ef45f4daa694f47e9b1d8511bb4d8ce3efaed9033a758d597c9c6a75e14e9bfdc151c59d31c09bc0eb0e2faf8f4df48fbda6aa6fbd850c10b3ce1d7fa66f176cfa7fc30153a6e89cb06832b3528e7705cf6d8823f35e891da0ce8c145551e0f7a46cae23a1227b1573957a65f2233b9738a5f59d0d279b324a4ca94fd3634d40d69942c79870fc5e5ed758df1345eebbc20fcc9655a3f5df7af6b38f6f9a5777fac3d17e911aacef12d6c5e7685eae7c331b62f0823586884025574e8fead294e3761c71bf9658b2d0129e34c0097ae181a5b78e97b8d224132758c870109e21860da6d4060e3c97de4a6fb4766b497690e6315b6633b3bcb7f096e57e7adb077a67912d9f6b26adee978d39057950b080d191ef6d81fdb48dcfad0a87434eb7355bc198d9b663775a692199c5c938de88b2e6733cb9b571a8482e85dfec7f3f3f473fbba0aef2fc5e42418d04f9d4634c2a01779ca03abb1456f7ea04b4879e61e0ded5f0728eb71c7133e23974d5c07bcd7c833312a35c4887ea20e4f6cd1dd825a121c1b849c324478e918b78da0264e001beab5896e3877d758b6e6d6eb02f43f510f552eaf7cdc6180337cc220031720e017398989ff1183de332f2332cb32dee6b8c6878ba3483a6e31255c71b966332a51340aeb2913b44acb9ab892e4a058bb9cac40bdad968a175106c00828316f381caa518e6fa059445781ebc7ebd1968d5cd172b8396fd6dc97cbd31c03f081906bd07a02f8ccc13dcc7fc0ae047a5e58e89d0b6ac35c068eaa071fd33ce00ce95d559b871aef3ff469a877d6771f02a757563a2f5269c089fc94517a9980622232876e40d168952d24eecacc3a930f4b80c912ec5d8a968b32791a8673d4ae4094b7dcc0b5386e72520d562a722316aae43cee38e6a7827696ed9868ac472955eb6ddc8fd9141b724f092e5d47237f1655583f5475bba30d819e5732e1db767e87f8e609bc649ea7d6528c3c67cef95bf33eebe1c357b8e20067e897bc2b8cafb8317aab2f6ddc38a566f969db4e92acb260f9f0d99fa1a67f2a8675b2e169be15dc09386c18ce8011f67e40b56649594ac67843bcdbfecfc94268aef8a1019fb0b43af6bb8ee4bedb44f4215464b89c89d15ca80421af0d3d642ed8c860f348d475bf4d9d38e98d8fb3ea3833174e4d4a401e186bc1eb865a1e40e1e5da35b90b929205ae5cd71770aa44c82013933b18e4f14d29493b2684b9f9d2d954b106249fa45bc9575a3e0066658edb30ed3cdcfbef516647510bcee59b3fb5a08b4975809409bd688fe0755ee18c5c1f43e460db9ca174fd2decc2ed50621fe83af9e05804f199e53a4459c9173d50efc8d585afe458d0d0a3c23f23ae93f93e972c8c1d74b06941f9c6326d39c619173da8ca3cceacf0a857f5ef320620b7dc697c623bcf3167b0f7578c55158969f2337813448b8615ce9902fdd3178257d5476193d45078543fb932feed7434e0d688b9663740de3ef6fd15e437b6ae87878f09d094bc86bbb86c7aa8f6f61279211b8ff415326ce328503a9450bc126aa34f6af79ccf8eb8c505420746e52bb27b67928a7d4acb7484386ee343c647b9a2a3fe0c93e7e919eb8708a54568fe4d37ac99a3300a68b7d0e505461f39a26ee8194a9177830940a63bbbb445bc125fb848e2a0afafe6727df18b74c7d87a0dbf42756bcf1b6e09092b51da8cb98bf52f34bac2f345617b2f716cbd734f8b11fe2f5d8d626f99903f42f5cf964e20b70fe87b697a565a57ecb890b3cad6e50e436d2915a6cca7c10b1aa7fe1e8f4e4337f2bfd4a18f44ed0bbe78f6e387f664e070ba71fa4d48ebb3766f5489107e5150313a9f7eb513cf0c21ba99e784315f6c8640eae0e3704b1b2ea27bdea092fc1934416aca8496255c5feba42e6ca8f3e2e0306cfd4d9f85b2a8623113907178b3fd9a316fdf8b69b794ce8570f4ddcdb31a1846c573065a584314b3d8641aac723e2cd0693bec0bc8f9c56cd41d315e417f810f637da7a1a05e75b930586db9bd35648bb08fefca2c2d96d9f427a1ec9471547532b55d4249956235b890f98da0fb5a5a5d1d45b7452faf0bd45f93dfa7365859674e0fb8d56e71d323022bbbff3a0c587cb3d6e1e24b10da6bd504c142595efcfd8313c3e6cd2def955733055127ce04b24841a4eef7dd954f81af377d30d318d992292a284f17410e21d7e52cb6f66a55521e188e76b593021c09bce87dbe57142e1f55c9d25328d2ad9e489d15507db88cd318a3101ed482fe586e6696977c39fcec471db4eb40b9b7d59a265bf474f884626e1fb4a6364895e747c014906e82e833ca23e992bcf9a4d5b4556d804f87a3b2fc576e274c6986eca23b7b0fc08deff7a57742a2bb62e6965379d1749641cf61cff2dbf2c57543c21109272c005a3e48b4cf6f35dcbe20d91c5426fbd1c0fe29e27bb878a5fc00499c319e07ee424636313f4ed5f574d2adcb8c40d98964cf06df9edbb4910dc57113d549cc83dc86f47d1c9dff56977d35bc0a25f90dabe4f590b57241f4c81064f248c6939d2020514acf40d26a4fda76df6b37f2c65e3a0e589b940d8b919933d6158a4359daeee25d5b83464be223d319a564e638ad6e850c0d5a861efeb8bbe2b5c62af6495f4edf334a0f3c64d1419061266b390b7eeaf70595abcec8b01cb60be1cceec2406f16e48f082f46c7e63878fab40f2496b740ecdd837a412b03423a96576133f7efcd2af9ea05ecfb8306d77ce6d9452315540462e7d0280bda7933aa3d71e3e1551478540c0556e7bc750fa4599cdfe6a8ff489ef4a5d19ced8d376c6dc145c6588225906b500a17acbbda5d6f712a2e52ff2a04baa913a531ef4b0d503c070c70a63d1394e5e97b7f2e4939d47c13cb5020aab376f47e386aca2e5e9a2cc209273f2617a8fa84c29e04eda2", 0x1000) (async)
write$char_usb(r3, &(0x7f0000001cc0)="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", 0x1000)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000002dc0)={0x14, &(0x7f0000002cc0)={0x40, 0x4, 0x95, {0x95, 0xe, "68318dbd55321021e3c00cb1cfc4a96c5eb121e7e416730360e4bcc1326cd93a491b7631be0d0983cbdc3f8b043cd710e05ebd1408bec0353f44cb34a812471dd7b9ef9f96486c024b2140e059fd8c9a220b4c5084cfb53752c83e43eb811240065527e073a1578a1310ee071092de48ce6c03456aea9c6ef81fd6316a3209efa3a188fda601d4271f35f5464f74c81f8a559b"}}, &(0x7f0000002d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f0000002fc0)={0x2c, &(0x7f0000002e00)={0x40, 0x16, 0x95, "fab8bbf564f7c2aff14ddcd5d7f7bae737e91efc6122d4c942ccbf1d90aaf9abc0bfa4920c68dc638230d90a29ab8d895675392fbb5b7f208fdf8f35145755bef02a305a2beceba2f89fbda4face5ecfa3f5916337f19717e55074c07977ad475eef4df52a1b4d91be7c9e75f6fed02a7bdca5bf46002eec62a8c3f52e57a4ef3b6d110cc8b252e7de1a2f122cdb2306d39c21ecfc"}, &(0x7f0000002ec0)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000002f00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002f40)={0xc0, 0x5, 0x4, "8d43a754"}, &(0x7f0000002f80)={0x40, 0x5, 0x5, "76abd2b05b"}})
r6 = syz_open_dev$hidraw(&(0x7f0000003000), 0xbff, 0x408003)
ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000003040)={0x4, "07a7049ec02970c8b4be6b51a4b4b2e2a015e176655c3403d14fd11c8276a7773eaf36713c539da96c559c194dea8bd95219efec53c5eda9db53c9d05bfd9163"})
ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f00000030c0))
syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000003100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x400, 0x5, 0x9, 0x7}, {0x9, 0x5, 0x0, 0x2, 0x40, 0xfd, 0x3, 0x5}, {0x9, 0x5, 0xa, 0x3, 0x8, 0x6, 0x5, 0x6}}}}}}]}}, 0x0)
syz_usb_connect$midi(0x6, 0xe7, &(0x7f0000003140)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x5057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x7, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x8}, @ms_header={0x7, 0x24, 0x1, 0xf4bf, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xfffc, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x91, 0x4, [{0x0, 0x4d}, {0xf6, 0x40}, {0x1, 0x8}, {0xf, 0x7}], 0x67}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0x8, 0x8, [{0x5, 0x5}, {0x40, 0x54}, {0x1, 0x1}, {0xfa, 0x2}, {0x5, 0x80}, {0xd, 0x4}, {0x7, 0xb}, {0xca, 0x2}], 0xc}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x9, 0xaa, {0x7, 0x25, 0x1, 0x3, "d3d063"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0xdf, 0xff, {0xa, 0x25, 0x1, 0x6, "ce205b51be48"}}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x0, 0xba, 0x7, {0xe, 0x25, 0x1, 0xa, "7a0083e5bcb42c0abb8b"}}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xa1, 0x8, 0x7, {0x11, 0x25, 0x1, 0xd, "a760dc5abffa7234873b1cca9a"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xa, 0x7, 0xcc, {0xf, 0x25, 0x1, 0xb, "5fd540a233d0dc3cb1d80a"}}}, {{0x9, 0x5, 0x6, 0x0, 0x7d7, 0x1d, 0x5, 0xa, {0x7, 0x25, 0x1, 0x3, "0f8270"}}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x2, 0x1, 0x0, {0x4}}}]}}}}}]}}, &(0x7f00000034c0)={0xa, &(0x7f0000003240)={0xa, 0x6, 0x201, 0x8, 0x40, 0x2, 0xc526df4dfb730dea, 0x2}, 0x37, &(0x7f0000003280)={0x5, 0xf, 0x37, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x33, 0x1, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x1, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x8, 0xf4}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x1, 0xf000, 0x8, [0xff0030, 0xfe70]}]}, 0x8, [{0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000003300)=@lang_id={0x4, 0x3, 0x3c01}}, {0x32, &(0x7f0000003340)=@string={0x32, 0x3, "0c35c40c9467cc3d88d606548408e6446955084e1f7f45b8e8d4084f2751a9b7624ce022590f4f777180a7f7b7c21d6e"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x816}}, {0x35, &(0x7f0000003400)=@string={0x35, 0x3, "9a04f85d5568c43762367b9172d588d0435e45d08d11a533d550a0f138e26c25814ecb4b6f89a05c995ed1349e282dbeacf5f2"}}, {0x14, &(0x7f0000003440)=@string={0x14, 0x3, "d13f0a063c9a9c33ddbe87a4925fce7aa8d4"}}, {0xe, &(0x7f0000003480)=@string={0xe, 0x3, "0dc2699a3d44146fb711b978"}}]}) (async)
r7 = syz_usb_connect$midi(0x6, 0xe7, &(0x7f0000003140)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x5057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x7, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x8}, @ms_header={0x7, 0x24, 0x1, 0xf4bf, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xfffc, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x91, 0x4, [{0x0, 0x4d}, {0xf6, 0x40}, {0x1, 0x8}, {0xf, 0x7}], 0x67}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0x8, 0x8, [{0x5, 0x5}, {0x40, 0x54}, {0x1, 0x1}, {0xfa, 0x2}, {0x5, 0x80}, {0xd, 0x4}, {0x7, 0xb}, {0xca, 0x2}], 0xc}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x9, 0xaa, {0x7, 0x25, 0x1, 0x3, "d3d063"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0xdf, 0xff, {0xa, 0x25, 0x1, 0x6, "ce205b51be48"}}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x0, 0xba, 0x7, {0xe, 0x25, 0x1, 0xa, "7a0083e5bcb42c0abb8b"}}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xa1, 0x8, 0x7, {0x11, 0x25, 0x1, 0xd, "a760dc5abffa7234873b1cca9a"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xa, 0x7, 0xcc, {0xf, 0x25, 0x1, 0xb, "5fd540a233d0dc3cb1d80a"}}}, {{0x9, 0x5, 0x6, 0x0, 0x7d7, 0x1d, 0x5, 0xa, {0x7, 0x25, 0x1, 0x3, "0f8270"}}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x2, 0x1, 0x0, {0x4}}}]}}}}}]}}, &(0x7f00000034c0)={0xa, &(0x7f0000003240)={0xa, 0x6, 0x201, 0x8, 0x40, 0x2, 0xc526df4dfb730dea, 0x2}, 0x37, &(0x7f0000003280)={0x5, 0xf, 0x37, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x33, 0x1, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x1, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x8, 0xf4}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x1, 0xf000, 0x8, [0xff0030, 0xfe70]}]}, 0x8, [{0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000003300)=@lang_id={0x4, 0x3, 0x3c01}}, {0x32, &(0x7f0000003340)=@string={0x32, 0x3, "0c35c40c9467cc3d88d606548408e6446955084e1f7f45b8e8d4084f2751a9b7624ce022590f4f777180a7f7b7c21d6e"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x816}}, {0x35, &(0x7f0000003400)=@string={0x35, 0x3, "9a04f85d5568c43762367b9172d588d0435e45d08d11a533d550a0f138e26c25814ecb4b6f89a05c995ed1349e282dbeacf5f2"}}, {0x14, &(0x7f0000003440)=@string={0x14, 0x3, "d13f0a063c9a9c33ddbe87a4925fce7aa8d4"}}, {0xe, &(0x7f0000003480)=@string={0xe, 0x3, "0dc2699a3d44146fb711b978"}}]})
syz_usb_control_io$sierra_net(r7, &(0x7f0000003600)={0x14, &(0x7f0000003540)={0x40, 0x31, 0x4c, {0x4c, 0x6, "a2283cf66cd3ecf8e23481ad77879bf41aa81f64b337b8935a9efbf138ebf795c44271157231ab7eaaf08fb304616d63752d8a9ac60395b66960aca8f4be1d6206c898798b47d32e3b19"}}, &(0x7f00000035c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}}, &(0x7f0000003bc0)={0x1c, &(0x7f0000003640)={0x40, 0x15, 0xf5, "813c44d573cf64fa5c5667aba97e4b68c1ff0ba4cb4bbff6afaefbda04b35a088f8a431c4339b1e54a79039b7a6e4c986a09b8160336aeec43e4bb0b64c180656d4a342c8eb2188fb43e04da960658cd24ad92f4006637b173c1d371298f204d63a6541ad6da7870580a54f6d49086078fd77c30020f1f18428e364aaedc7d71d92d14903c97260247c3ccf105ca920bad92aa20a8a80aabdbaefc07360624364ab238f8f27445da5f5980642b36e958204187ba0539741729feec466c14edd2a3aca0419a0b6fad974b6ecd2c2a4c879103024056abedcf68dc1daf24ff2b72bd746bde3f71801c1f118ef2747c87333f2b4ecb2b"}, &(0x7f0000003740)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003b80)={0x21, 0x0, 0x2, "16e4"}})
syz_usb_control_io$hid(r5, &(0x7f0000003d80)={0x24, &(0x7f0000003c00)={0x20, 0x23, 0x84, {0x84, 0xf, "df7910ec083e5216dc7972d53ac0a79ee2a7f59321d381923cade7bc3c4519e93de72c7f4ed4096b26900d0e85312539c9a220b10714203b3e816169f4c64939b7f32c83dafa1837f52fc8ff5a531071e4282a84054d3f1607bf1dac8f827bb08d570309e95ea84e776c24e69527b8f2e0c36df6e3d94b2d574c3b4d81f1e1310a54"}}, &(0x7f0000003cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000003d00)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0xb, "fe"}]}}, &(0x7f0000003d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x4d0}}}}, &(0x7f0000004040)={0x2c, &(0x7f0000003dc0)={0x20, 0x1b, 0xf1, "bb4b75b29671a7e3d4b43f2e6cb16289fda4d02000957e2f9190366944d186b5897243e60bcab664121242432e27b6860f1dd1ef4003b80943d0490a18d6d41a55ae3cc44740e8646e3d612f7bcf15b9a081fcadf7119b61b679932d94436509f5c98d66c893993fe964df43b8fc08f1116f482867d83b4b0f3585e7abe35d032e2211ce2e31982a10f373d46ffd9a8ab1b97fd5eb9dd61082343e037108d581b93e9c868a2045717aa47fe27de070dc5605ee331277ca31b71c79e39867901e159c623f157b13328712db9f1ddc23945924676c8a640abfe576136cd9ac953d8fd673c77c5f4f8f02a2be69221c1ba733"}, &(0x7f0000003ec0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000003f00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003f40)={0x20, 0x1, 0x81, "6d0012559bb89e2b87c58cfecae799dd3b78e86a6760f17001fa6ac695e15f1f406484c53b6ff83785e352262a61508c034f0c4be5da8b98d4ed812c960ce875e1dbd4bbc75645928dcf9fb408fef4e77960d0293d4298b2ce5d2ef0e01801b9e32fca32e217fde109be4f6238de060429cdd7544c665e035e0a3a895a9d328a76"}, &(0x7f0000004000)={0x20, 0x3, 0x1, 0x3}})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000004080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x98, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x3c, {0x9, 0x21, 0x2, 0xf, 0x1, {0x22, 0x47d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xea, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000004180)={0xa, &(0x7f00000040c0)={0xa, 0x6, 0x300, 0x2, 0xed, 0x1, 0x20, 0x5}, 0x8, &(0x7f0000004100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000004140)=@lang_id={0x4, 0x3, 0x3401}}]})
r8 = syz_usb_connect$uac2(0x6, 0xca, &(0x7f00000041c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x0, 0x40, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x4, 0x18, 0x9}, [@effect_unit={0xf, 0x24, 0x7, 0x2, 0x3, 0x4, [0x1, 0xb1199f4878711665, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0x4, 0x0, 0x1002, 0x8, 0x1000, 0xfa}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x0, 0x24, {0x8, 0x25, 0x1, 0x1, 0xc, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x8, 0x2, 0x0, 0x3f, 0x7, 0x7}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x3, 0xc, 0x80, "09c1fb5b5a85f9d0"}, @as_header={0x10, 0x24, 0x1, 0x89, 0x2, 0x3, 0x1, 0x8, 0x5b8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x6, 0x8d, {0x8, 0x25, 0x1, 0x83, 0x0, 0x88, 0x1}}}}}}}}]}}, &(0x7f0000004580)={0xa, &(0x7f00000042c0)={0xa, 0x6, 0x250, 0x3, 0x7, 0x7, 0x40, 0x4b}, 0xf, &(0x7f0000004300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x10, 0x353}]}, 0x7, [{0x4, &(0x7f0000004340)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000004380)=@lang_id={0x4, 0x3, 0x40b}}, {0x14, &(0x7f00000043c0)=@string={0x14, 0x3, "2491ad8817bb10d8c4a218d4c8c7e980fddc"}}, {0x4, &(0x7f0000004400)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000004440)=@lang_id={0x4, 0x3, 0x406}}, {0x92, &(0x7f0000004480)=@string={0x92, 0x3, "4238d86e5bda54ad4817645dbf29a4ed15236b29ba876ec79a0f03530e6394f7d0406c7df5862ac4e0667e4f6ae622f106a1a1b01e2b8b78b85069a05704fdedee053d4f96720ea116363e252726ed85b5c2598a1af0ab430786f8e918d09b1e713a9120d98c55f277ad551688d91d573494a9ad02fc6d8896987bafb92034573619f95a848cacad7125c264f4ba57f2"}}, {0x4, &(0x7f0000004540)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_control_io$uac2(r8, &(0x7f0000004740)={0x14, &(0x7f0000004600)={0x0, 0xe, 0x20, {0x20, 0x2, "11b2b8282223639735fde20e3bfa6fff30331eb112f1af4338dd469acc7d"}}, &(0x7f0000004640)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "d11fddc0543e604e2bfe8f291e412e8d8ec300c2d93f1a1a2cf0ed8a73cfc2fefd2b69f65bbc49040354150f6e017682939df0992d1184b0546b3157a6df29d2a9b97e830fc8eb4b9d9e40a356878d96e02d7955b91de81e078b21ab9cdabdd682a01d1640f4e5313eb7562d95cf6a07a50777c06bd38bf44199add430ed5da66463e441d5fa0f7f8b6fe06107e8ee12e0ac3bb8093c531ccad0fdf324c961d02804a741864fbabb78eb24d9b5593ca4b0eb9a57bc4fb90375b36ffe57c70d9068eec6ff"}}}, &(0x7f00000049c0)={0x44, &(0x7f0000004780)={0x40, 0x7, 0x73, "728c0f13d0bafe0467db8b0d36a6a74b103f0b994d6a36bab7caaabb0e053704bf02a71c30f2a87dae9a923de3a6cca5b62f6eb3e13daa24e622ea486210fc6b9c6469951e5669a35586202bc3cf0b5afb35646f9ae4e38f41856c086d6354abf40ebcd33aff13e8d206dc917c8e47caf90a7b"}, &(0x7f0000004800)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000004840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000004880)={0x20, 0x81, 0x3, "98c07a"}, &(0x7f00000048c0)={0x20, 0x82, 0x3, "d08c0f"}, &(0x7f0000004900)={0x20, 0x83, 0x1, "a4"}, &(0x7f0000004940)={0x20, 0x84, 0x2, 't>'}, &(0x7f0000004980)={0x20, 0x85, 0x3, "d3c4f0"}}) (async)
syz_usb_control_io$uac2(r8, &(0x7f0000004740)={0x14, &(0x7f0000004600)={0x0, 0xe, 0x20, {0x20, 0x2, "11b2b8282223639735fde20e3bfa6fff30331eb112f1af4338dd469acc7d"}}, &(0x7f0000004640)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "d11fddc0543e604e2bfe8f291e412e8d8ec300c2d93f1a1a2cf0ed8a73cfc2fefd2b69f65bbc49040354150f6e017682939df0992d1184b0546b3157a6df29d2a9b97e830fc8eb4b9d9e40a356878d96e02d7955b91de81e078b21ab9cdabdd682a01d1640f4e5313eb7562d95cf6a07a50777c06bd38bf44199add430ed5da66463e441d5fa0f7f8b6fe06107e8ee12e0ac3bb8093c531ccad0fdf324c961d02804a741864fbabb78eb24d9b5593ca4b0eb9a57bc4fb90375b36ffe57c70d9068eec6ff"}}}, &(0x7f00000049c0)={0x44, &(0x7f0000004780)={0x40, 0x7, 0x73, "728c0f13d0bafe0467db8b0d36a6a74b103f0b994d6a36bab7caaabb0e053704bf02a71c30f2a87dae9a923de3a6cca5b62f6eb3e13daa24e622ea486210fc6b9c6469951e5669a35586202bc3cf0b5afb35646f9ae4e38f41856c086d6354abf40ebcd33aff13e8d206dc917c8e47caf90a7b"}, &(0x7f0000004800)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000004840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000004880)={0x20, 0x81, 0x3, "98c07a"}, &(0x7f00000048c0)={0x20, 0x82, 0x3, "d08c0f"}, &(0x7f0000004900)={0x20, 0x83, 0x1, "a4"}, &(0x7f0000004940)={0x20, 0x84, 0x2, 't>'}, &(0x7f0000004980)={0x20, 0x85, 0x3, "d3c4f0"}})
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000004a40)={0x3, 0x200, 0x1, 0x81, 0x3525, 0x2})
syz_open_dev$evdev(&(0x7f0000004a80), 0x9, 0x40000) (async)
syz_open_dev$evdev(&(0x7f0000004a80), 0x9, 0x40000)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000004ac0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xb, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xf, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000004dc0)={0xa, &(0x7f0000004b00)={0xa, 0x6, 0x200, 0xeb, 0x40, 0x0, 0x10, 0x1}, 0x5, &(0x7f0000004b40)={0x5, 0xf, 0x5}, 0x7, [{0x41, &(0x7f0000004b80)=@string={0x41, 0x3, "94e5bccf3a7596417ebb268c77ce57a5f1d01d0e4ee242060cc49b4059bba94db4cd6c8996df152a6728223083d27fd725d409c3bf0add184d265e1ad3fde9"}}, {0x3b, &(0x7f0000004c00)=@string={0x3b, 0x3, "f3cbfeb209a6f106fe2ee6c5b8406989e7ce65e1687cdc0520cc07fb72c51804f11b521a267cbf9bcfcaab8f9cfe63d0862e8aa0bc9be6e080"}}, {0x4, &(0x7f0000004c40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000004c80)=@lang_id={0x4, 0x3, 0x446}}, {0x10, &(0x7f0000004cc0)=@string={0x10, 0x3, "1e88cede8f9b081e089d65c26adb"}}, {0x7e, &(0x7f0000004d00)=@string={0x7e, 0x3, "f461670ee8d5b77bd91501c8befcff779837b7f1a345f4e3c10504a1b6e7e55de386137b5030e5e5a338a5672ae3c600e87b6cf979d9d76c46e8e4556fb8543a4fc57f01cf2764e410425e694ab1f2bbadb25e3e9b6f5eac45ec6e6b8c1604d2fcbae99ad1f179f80f268fb543ff1b7687041f515084f32b4b797674"}}, {0x4, &(0x7f0000004d80)=@lang_id={0x4}}]})
syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000004e40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xbf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0xc0, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0xf4, 0x3, 0x2, 0x6, 0x0, 0xc5, {{0x9, 0x24, 0x6, 0x0, 0x0, "f75ef7c4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x2, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x7, 0xa0}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x2, 0x70}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000051c0)={0xa, &(0x7f0000004ec0)={0xa, 0x6, 0x300, 0x7, 0x0, 0xd, 0x10}, 0x3a, &(0x7f0000004f00)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x81, 0xff, 0x294, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "66033420298df25341b8af8e8f0a5cef"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x3, 0x81, 0x1, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0xc3, 0x9, 0x6}]}, 0x4, [{0x9d, &(0x7f0000004f40)=@string={0x9d, 0x3, "3f581fdc6143bab6c245f9716b52b3dc8b1dc6a2339ef4b6bcf9371d63a878fcc58fea2759bde9275ab4b56485d929d6f354f87ee8629887a8cf637ee1f2ab80582ea784e7d93babbada564b893234f784774098108b335f1e3f95ab45da8d3ee3be434dbd7f83cf37ba75bbcd4ee9851444c16b1ce98328612784184d7728e13afe7df19214303746d0859b4a69b3a3fc4689e98e0962e9122d9f"}}, {0x4, &(0x7f0000005000)=@lang_id={0x4, 0x3, 0x445}}, {0xee, &(0x7f0000005040)=@string={0xee, 0x3, "3ca9cbc86278aba6ccc448e8ad7180ca8811fc1582452ffd7f1deb1a7d0d1305cf92e99474324202572c9d86cbe3ee76c59d945c7926289c3a092d19d6cf969a67c0b7b84ae450fe3837a239e6d62f992024d176c291715c8f30ae20940ed5f541b26554802a3fcde842f65bcea7e181950a3ab57045ebe2c789c005b8838ba81dde694e392fa68d05a8ee3d215ae0231b779f7f42824cc1ee1e52300110c3126c74a4da887987434c47d0fa1a55fd1fe15a18b576515874ed34afd8c89c87bb829157e2e695d68dd2af9f7338ec0c7db11554186ecf0d7f6d34bad32247eb566bf4710d0b8cc16210fa1dcb"}}, {0x59, &(0x7f0000005140)=@string={0x59, 0x3, "1987932bd10a88adc059ad88ae3b85aac4799da773e70181fa745d73be7112f03783b6cb06d295bcacb62dd60b53ec90c9b5947905de14a840339245614905d30abc7e9d903db6e016e7a885393eb98155d72828013fcd"}}]})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect(0x2, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002534ffb08f003070301000102030109023400010106903b0904740f03f2b75e800905800200040f008109050a0000020981000705a1662cbf36090503469b1b7e29cb850208000101029ccf441bafa4e6c2705c9466e81fa4e8a2acd59ecec2ccc3751197058976a1329b22a73978a9a87df6ef857782cac1e28777c62f715523af4518da0765aaafa3e795fa1db09a4fb19bd2a8a99013b22f9fe72a9c66253805b77446192c311672115c2b2c30c13b408bf13be618b19e7dccafc38f32443be578f374db79a35c3f957b30c966a72bcecafd5f8fe115b8316dcf4ae08f9ca8c81c16a34fe888347c"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ecm(0x6, 0x79, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x8, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x8, 0x24, 0x6, 0x0, 0x0, "44e32f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x800, 0xa8f, 0x94}, [@obex={0x5, 0x24, 0x15, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xda88c13b134c231, 0xf, 0xc, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xfd, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x12, 0x6, 0x81}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0x2, 0x8, 0x20, 0x6}, 0x77, &(0x7f0000000180)={0x5, 0xf, 0x77, 0x5, [@generic={0xb, 0x10, 0xa, "4d262388b08ddafe"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0xfa, 0xfb, 0xcb, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "2b376fca78c59421f6540229076fef98"}, @generic={0x41, 0x10, 0x2, "1fb0de73ecce9fc0da946c50b07ec7bf840ffe50604bd309e3fd1ddad52a3d48365654947747e8c76fb6720eafc2aabe1a150ae4a402122ff2663ab1e894"}]}, 0x8, [{0x39, &(0x7f0000000200)=@string={0x39, 0x3, "3dd07dec3e0cc4b0980e5b123c27868b28376547dc090f30ec2bc9e0cf8bfb9d5daa3e4d2a5a9db828f740d3c704a0d4b22a955895c6e4"}}, {0xfa, &(0x7f0000000240)=@string={0xfa, 0x3, "29504eeed6e40e2fc61e67f4161ad7c213b437ddbb899ea30fb69ed1f1c4e7bae229671f7296976311cb17aaf092d7d59aec475541814cff4ad341e94c03f68f9d6c11d1c05b1b077953164d64743e8f1779456ef704dcc5c6cae239e4644ac6c6f0945092dbf42d23ce00a89e3e08d19d88ff99dac1f8f590fab810f32a7058ede62d9cdd082cb11bcc544768eeacb85f3a58d0875172ec463bd10253f6ea0a21f68a97e24ab7d279bbb3f13c4d464e9f338a6a18412ed31cdd53e6878b75b13cbb03935fa0bf1314a04c09b384a881b0d4d4c4a4e715611cd35a68701afa23bc860aa497d97c010727036994c4f94904d9fbf08ea44239"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x448}}, {0xb6, &(0x7f0000000540)=@string={0xb6, 0x3, "37081f68d126d1900af61b6475a261d1135c09bae896ff860ded12a202c7161165cd96fd4d9276340456e688797703f0a7ac3124004c9e91f539aceb5686492ddec88cc11c5b84a19a7c9212bfa35f497d4ed145a57469eadad23440848a7859bfe49d7b49f188582c18064a9c57ac4404d9e61e7e34455a67176f08c95c9ad243fe2dacd690d3db46833b453b145f7b4854412e00bd63f2e3a535863b90f7b83e8c2d5484d7d6cf9945a1489691d8cfa0005a0a"}}, {0x6b, &(0x7f0000000600)=@string={0x6b, 0x3, "ad6c053ee40a024e39f2a4448b9352e1b8c8318e47c09243a8f0f588240be638da7f33bad66af06be260ff2502d994d10d2f9f596e7337776bb1f076e397d59de5e03d19f035d2486af91f2bb7bb1c69893880360944c48e24472c2d81bedfeb1d3343ea00ca98365a"}}]})
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0xbe71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x80, 0x2, "", [{{0x9, 0x4, 0x2c, 0x7, 0x0, 0x5f, 0x90, 0xe3}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000037c0)={0x24, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r2, &(0x7f00000006c0)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "52f4"}}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="40a6")
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040122901000000010203010902120001010080fa090400000002020000"], 0x0)
executing program 1:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000200)="0102030405060708")
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
syz_usb_disconnect(0x3)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102400000"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x84)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040c40700a00100000000010902200001010080fa09040000020806f2000705020200020007058102000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x76, &(0x7f0000001000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8030000")
executing program 4:
syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000009341906070000010203010902390001010080320904000003ff000000070581020004000630000000000705020200040006300000000007058303400001063000000000"], 0x0)
executing program 1:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d78000001010203010902200001010080320904000002ff0000000705810308000a0705020308000a"], 0x0)
executing program 3:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a0705020308000a"], 0x0)
executing program 1:
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe6, 0x3, 0x4, 0x6}, @as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x5, 0x40, 0x1, 0x0, 0x0, {0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x5, 0x40, 0x1, 0x0, 0x0, {0x8}}}}}}}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840)={0x40, 0x11, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d007000010000000109022d0001010080320904000003080650000905010200020000000905820200020000000905830340000a0000"], 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040476532020001010203010902270001010080320904000003ffffff00070581024000000705020240000007058303080001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc281, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000140)={0x40, 0x4f, 0x2, "4f01"}})
executing program 4:
syz_usb_connect(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002000000408205820540000102030109026e000301c0c310080b000201223061090400000001013000"], 0x0)
executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x40, 0x6b9, 0x4061, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x0, 0x2, 0x1, 0x0, 0xc0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10}}]}}, {{0x9, 0x4, 0x1, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x1, 0x1, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x87, 0x2, 0x200}}, {{0x9, 0x5, 0x7, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x1a, @string={0x0, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00a\x00b\x00'}}, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x0, &(0x7f0000002100)={0x40, 0x12, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020205240600010705810308000a09040100020a0000000705820240000007050302400000"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io(r0, &(0x7f00000002c0), &(0x7f0000000300))
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x584, 0x8, 0x102, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0xf4, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
executing program 3:
r0 = syz_usb_connect(0x3, 0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402004c601000000000109024e0001010080fa0904000000ff0000000904000103ff0000000705810200020007050202000200070584020002000904000203ff00000007058103b80b010705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="fc63")
executing program 2:
syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x23ba, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f3"}]}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f3"}]}, {{0x9, 0x5, 0x82, 0x1, 0x40, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b578100000000000109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="8001120000001201000200000040da0b5781000000000001"], &(0x7f0000000600)=ANY=[@ANYBLOB="80022700000009022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="c0050400000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000100))
executing program 3:
r0 = syz_usb_connect(0x3, 0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402004c601000000000109024e0001010080fa0904000000ff0000000904000103ff0000000705810200020007050202000200070584020002000904000203ff000000070581030004010705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000080)="fc63")
executing program 4:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0x9710, 0x7810, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, [], [{{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}}, {{0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}]}}]}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1)
executing program 3:
r0 = syz_usb_connect(0x3, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f00307020100000000010902200001010080320904000002080549000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303080001"], 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341902120001010203010902270001010080320904000003ffffff00070581020002000705010200020007058203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000400)={0x0, 0x3, 0x8, {0x8, 0x3, 's\x00y\x00z\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x40, 0xc0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40101101900001010203010902120001010080fa0904000000ffffff00"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40101101900001010203010902120001010080fa0904000000ffffff00"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341902120001010203010902270001010080320904000003ffffff00070581020002000705010200020007058203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000400)={0x0, 0x3, 0x8, {0x8, 0x3, 's\x00y\x00z\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x40, 0xc0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f00307020100000000010902200001010080320904000002080549000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)={0xc0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
program crashed: general protection fault in alauda_transport
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program did not crash
extracting C reproducer
testing compiled C program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: general protection fault in alauda_transport
simplifying C reproducer
testing compiled C program (duration=2m7.032974901s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program did not crash
testing compiled C program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program did not crash
testing compiled C program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: general protection fault in alauda_transport
testing compiled C program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: general protection fault in alauda_transport
testing compiled C program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: general protection fault in alauda_transport
testing compiled C program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: general protection fault in alauda_transport
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
validation run: crashed=true
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
validation run: crashed=true
testing program (duration=2m7.032974901s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x2, 0x1000, &(0x7f0000003000)=""/4096)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x4, "14730000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
program crashed: general protection fault in alauda_transport
validation run: crashed=true
reproducing took 1h37m37.709064658s
repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 6317 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:alauda_read_data drivers/usb/storage/alauda.c:972 [inline]
RIP: 0010:alauda_transport+0xfd6/0x35c0 drivers/usb/storage/alauda.c:1187
Code: 48 c1 e9 03 80 3c 31 00 0f 85 ee 1d 00 00 48 8b 0b 8b 54 24 10 48 be 00 00 00 00 00 fc ff df 48 8d 1c 51 48 89 d9 48 c1 e9 03 <0f> b6 34 31 48 89 d9 83 e1 07 83 c1 01 40 38 f1 7c 09 40 84 f6 0f
RSP: 0018:ffffc90002dcf9e0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff888118ad0920
RBP: 0000000000000240 R08: 0000000000000005 R09: 000000000000001f
R10: 0000000000000009 R11: ffffffff81596b4a R12: 0000000000000001
R13: 0000000000000001 R14: ffff888118ad0900 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888268633000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7516ee1254 CR3: 0000000109f36000 CR4: 00000000003506f0
Call Trace:
usb_stor_invoke_transport+0xee/0x15d0 drivers/usb/storage/transport.c:611
usb_stor_control_thread+0x5e4/0xae0 drivers/usb/storage/usb.c:462
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:alauda_read_data drivers/usb/storage/alauda.c:972 [inline]
RIP: 0010:alauda_transport+0xfd6/0x35c0 drivers/usb/storage/alauda.c:1187
Code: 48 c1 e9 03 80 3c 31 00 0f 85 ee 1d 00 00 48 8b 0b 8b 54 24 10 48 be 00 00 00 00 00 fc ff df 48 8d 1c 51 48 89 d9 48 c1 e9 03 <0f> b6 34 31 48 89 d9 83 e1 07 83 c1 01 40 38 f1 7c 09 40 84 f6 0f
RSP: 0018:ffffc90002dcf9e0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff888118ad0920
RBP: 0000000000000240 R08: 0000000000000005 R09: 000000000000001f
R10: 0000000000000009 R11: ffffffff81596b4a R12: 0000000000000001
R13: 0000000000000001 R14: ffff888118ad0900 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888268733000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb6f8698060 CR3: 0000000125ff4000 CR4: 00000000003506f0
----------------
Code disassembly (best guess):
0: 48 c1 e9 03 shr $0x3,%rcx
4: 80 3c 31 00 cmpb $0x0,(%rcx,%rsi,1)
8: 0f 85 ee 1d 00 00 jne 0x1dfc
e: 48 8b 0b mov (%rbx),%rcx
11: 8b 54 24 10 mov 0x10(%rsp),%edx
15: 48 be 00 00 00 00 00 movabs $0xdffffc0000000000,%rsi
1c: fc ff df
1f: 48 8d 1c 51 lea (%rcx,%rdx,2),%rbx
23: 48 89 d9 mov %rbx,%rcx
26: 48 c1 e9 03 shr $0x3,%rcx
* 2a: 0f b6 34 31 movzbl (%rcx,%rsi,1),%esi <-- trapping instruction
2e: 48 89 d9 mov %rbx,%rcx
31: 83 e1 07 and $0x7,%ecx
34: 83 c1 01 add $0x1,%ecx
37: 40 38 f1 cmp %sil,%cl
3a: 7c 09 jl 0x45
3c: 40 84 f6 test %sil,%sil
3f: 0f .byte 0xf
final repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 6317 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:alauda_read_data drivers/usb/storage/alauda.c:972 [inline]
RIP: 0010:alauda_transport+0xfd6/0x35c0 drivers/usb/storage/alauda.c:1187
Code: 48 c1 e9 03 80 3c 31 00 0f 85 ee 1d 00 00 48 8b 0b 8b 54 24 10 48 be 00 00 00 00 00 fc ff df 48 8d 1c 51 48 89 d9 48 c1 e9 03 <0f> b6 34 31 48 89 d9 83 e1 07 83 c1 01 40 38 f1 7c 09 40 84 f6 0f
RSP: 0018:ffffc90002dcf9e0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff888118ad0920
RBP: 0000000000000240 R08: 0000000000000005 R09: 000000000000001f
R10: 0000000000000009 R11: ffffffff81596b4a R12: 0000000000000001
R13: 0000000000000001 R14: ffff888118ad0900 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888268633000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7516ee1254 CR3: 0000000109f36000 CR4: 00000000003506f0
Call Trace:
usb_stor_invoke_transport+0xee/0x15d0 drivers/usb/storage/transport.c:611
usb_stor_control_thread+0x5e4/0xae0 drivers/usb/storage/usb.c:462
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:alauda_read_data drivers/usb/storage/alauda.c:972 [inline]
RIP: 0010:alauda_transport+0xfd6/0x35c0 drivers/usb/storage/alauda.c:1187
Code: 48 c1 e9 03 80 3c 31 00 0f 85 ee 1d 00 00 48 8b 0b 8b 54 24 10 48 be 00 00 00 00 00 fc ff df 48 8d 1c 51 48 89 d9 48 c1 e9 03 <0f> b6 34 31 48 89 d9 83 e1 07 83 c1 01 40 38 f1 7c 09 40 84 f6 0f
RSP: 0018:ffffc90002dcf9e0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff888118ad0920
RBP: 0000000000000240 R08: 0000000000000005 R09: 000000000000001f
R10: 0000000000000009 R11: ffffffff81596b4a R12: 0000000000000001
R13: 0000000000000001 R14: ffff888118ad0900 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888268733000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb6f8698060 CR3: 0000000125ff4000 CR4: 00000000003506f0
----------------
Code disassembly (best guess):
0: 48 c1 e9 03 shr $0x3,%rcx
4: 80 3c 31 00 cmpb $0x0,(%rcx,%rsi,1)
8: 0f 85 ee 1d 00 00 jne 0x1dfc
e: 48 8b 0b mov (%rbx),%rcx
11: 8b 54 24 10 mov 0x10(%rsp),%edx
15: 48 be 00 00 00 00 00 movabs $0xdffffc0000000000,%rsi
1c: fc ff df
1f: 48 8d 1c 51 lea (%rcx,%rdx,2),%rbx
23: 48 89 d9 mov %rbx,%rcx
26: 48 c1 e9 03 shr $0x3,%rcx
* 2a: 0f b6 34 31 movzbl (%rcx,%rsi,1),%esi <-- trapping instruction
2e: 48 89 d9 mov %rbx,%rcx
31: 83 e1 07 and $0x7,%ecx
34: 83 c1 01 add $0x1,%ecx
37: 40 38 f1 cmp %sil,%cl
3a: 7c 09 jl 0x45
3c: 40 84 f6 test %sil,%sil
3f: 0f .byte 0xf