Extracting prog: 29m47.498251359s
Minimizing prog: 2h48m12.769316075s
Simplifying prog options: 0s
Extracting C: 2m2.280602889s
Simplifying C: 25m57.247751291s
extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="001206", @ANYRES32=r0], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0x17, 0x3, "1cc535"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x0, 0x9, 0x2d, {0x2d, 0xf, "d9617cae48caeee579c88ec1ac6f9ceddcfb27e599473501861ba37944344e0076879b6fe7c8b4c0f2134f"}}, &(0x7f0000000380)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "176459ac62e37671403a3eecdc2473c50d81f850b48934c4e0d399f1f11cb8c759ad5222cf6ba9bfeaff3d8b0c044dd5849ed4b2dbe5a60fb6037ee8074795eff88bc3a84d69e15fea0aa74e87370f0306346aacef7a5d7ecbb7a6d656910e86866c3497502989e28ad0ac6e072c4cb0da9b820793c4e14c81b3afec2405b45de0dc4413ceda8715ce56d7c785a8b5835f63fcaf0487b6b07b960b4e1b2799e899bddb4da5cd13f831f3c9ff5d3707050fdb60574e66afb8eb79a6709b47c36d8e2078a590ad66be1f6da81ac6a0ca43a9f0d16aca35d7459dd6a77c4425"}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x0, 0x9, 0x75, "58bf7a38e2049f0cfc308daade85fec376be840b7ffa17da7e3dd2726a42f3e355f8c76a3ca2d7fcdc30d1332dee80958252618aab0e254890345698492228e3c370789232b8e64758241a455ba7f8f2566181b03e0f5b1ffd9a84a6ee7c3740a5913a8716f7a57f3a69059d60bffa8eb818cf287c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "948fb8"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "ea"}, &(0x7f0000000640)={0x20, 0x83, 0x1, '_'}, &(0x7f0000000680)={0x20, 0x84, 0x2, "af90"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "2c4416"}})
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_control_io$lan78xx-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$EVIOCGKEYCODE_V2-ioctl$EVIOCSFF-syz_open_dev$evdev-ioctl$EVIOCGMASK-ioctl$EVIOCRMFF-syz_usb_connect-ioctl$EVIOCRMFF
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0xc4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x53d}}}}, &(0x7f0000000080)={0xffffffffffffff0e, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(0x0, 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x0, 0x0, 0x0})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "2502"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000300)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x96, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x4, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000001240)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$hiddev(&(0x7f0000001280), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000400)={0x53, 0xe1, 0x7, {0xff11, 0xffff}, {0x4, 0x5}, @const={0x4, {0x4, 0x6, 0x4, 0x4}}})
r8 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0)
ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000480)={0x0, 0xffffffffffffff36, &(0x7f00000004c0)="952bb3e006ae9a4c3a"})
ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000000500)=0x7)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585", @ANYBLOB="f7843218dc"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$hiddev-syz_usb_connect$printer-ioctl$HIDIOCGNAME
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x24, &(0x7f0000001500)={{0x12, 0x1, 0x210, 0x5f, 0xd0, 0x57, 0x10, 0x5c6, 0x9080, 0xdb81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x80, 0x6, "", [{{0x9, 0x4, 0x5, 0x7, 0x0, 0xff, 0x84, 0x4c, 0x9}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="020f"]})
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x200080)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xe2, 0x2}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x81, 0xb4, 0x9, 0x10, 0x7}, 0x107, &(0x7f0000000500)={0x5, 0xf, 0x107, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x9, 0xf00, 0x200, [0xffc0f0]}, @generic={0x1d, 0x10, 0x4, "f890467ed68026dc7e1cf7354f17a257f18f7ac91b9230456d4f"}, @ptm_cap={0x3}, @generic={0x79, 0x10, 0x4, "330a081ab9e6076ae531a1effbce1d0ff1db6e1f9605f61d02c3745a9702e7234899327f9303a10573013acc528f6cd326519560e55bf9af66e73c89472436076eb4e34fb9bfa96464245dcaa8ad9b0750a794902019ad9786ffb19eb8b099e6c8294d8c6ac7f8159536fd7edebc5812085abcabec65"}, @generic={0x45, 0x10, 0xa, "b1a3e356dcb70645b20129a518daa745432faf19689e1330b92376ae5fa27b471dd1bcaba3c453f81398a44042f78c9a001a1ecbfb3e1356dc1beb2c3e788fb4bfd3"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3dcf2166681a26d37f96d40444b788b5"}]}, 0x5, [{0xae, &(0x7f0000000200)=@string={0xae, 0x3, "4fa24a65c7c9cb3c9d8a4c924e1a3d8c53fe5afa5d9d3ae2d275f04962860024d63c8ae5bfaeb75410ee6ec92f89426b92664bc4e02586049bfb72ad9836dd06a3588e3bf48519d87ea01ae1d007e97abe51cf9f88319b82b955e1bf3d93feab6c140c71f354570f7f44984b00455601036b72ca714b405b7400a2f332069058d160a8cfe2aa6dc0cf6373b594acf5d763f4cc3fec866385d15fb27ea19f6080077a9cb6b899ee3ab37ca940"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0xee, &(0x7f0000000300)=@string={0xee, 0x3, "22cb2b56a9b0370e5bb4f32a082c02b77062ff1ee25c3f3eab673daf1ad3d8385c8b3691e48ee96f5aa2245df39dee0bca0f320b2ada5fde8933bc54cf539dd7a37e4054908a41de735aa142efe08a7632de6803ab0e7ee468dc827974a213c7caec17e12b22b322fd8cb0e255af5f361d4b6aa8eeeb892370b80e4d7a3f31d0bebcf6edcb102edb8ceda797006e920f5e3b84a69d69d673ac81d3873597a6683275a1b17630605fa68810563d6ec7d5d8483ddaaae55c8959252ff1d963a3b8637da3d77bcf827f0a4e70bae972dcafa3ed2f56421db1e40e75afeed757c5d1a61ec757d14b96fe2edf756b"}}, {0x8, &(0x7f0000000400)=@string={0x8, 0x3, "c130d861cc85"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x410}}]})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040))
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$EVIOCSKEYCODE_V2-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$sierra_net-syz_usb_control_io$sierra_net-syz_usb_control_io$sierra_net-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_open_dev$char_usb-syz_usb_disconnect-read$char_usb-syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$uac3
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001200)={0x81, 0x7, 0x681, 0x2, "85f8149b1700aabf596801edf236947e66ddb388e7d20d353d600777d4856cd7"})
r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x51, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f00010000000009046900000e010000082402010202"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001340)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001380)={0x44, &(0x7f0000001400)={0x0, 0x14, 0x6, "178d9c554e53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000001440)={0x1c, &(0x7f0000001480)={0x40, 0x6, 0xfffffffffffffea0}, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000014c0)={0x1c, &(0x7f0000001500)={0x40, 0x31}, 0x0, 0x0})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, 0x0, &(0x7f00000000c0)={0xa1, 0x1, 0x400, "6a103c6c72297a6571ed33f415094cf192017cee67ab55de6aaeb1bbdb2b18c739894e801d49f5588a7df7e7efa760d42bb552a891a70d5dbd139940b8d921faf1f464b059d8fb861479f7ceccac9427bbe387bc526ef9bd61c0534e73bf35ec1d3708dc04e904a801b02e2990d9db76276d50922d400653dd0b2da260cb4fbfb579729af66ea21442f0997e4a5475e5b80c05527992ffdb56c6f3a5d578180184be27ed88dccd85437bba046a2cd216cae85c1d6b8c2491189ed9d534d6e99a018f4ef9636f453e588f69d48ed80015cb7f51636be2d4d857af0338f4568a28c01ddceb67b275c6961a98f519b64e6d7e98933475ba772c427d25f70652827f6d135809c4e34271a59c0f2469206d7d0aae1c0ff7cf2e00d0028f58e7c8e128f0778f48cc3ad0b4ff6c6bf9e4bf6a73229e7b4d0299f720e461aa03a4a435b088d8a90e95a899907b4a37c30ccf8a32a24c073fc9efb6510a6ce8e5fa5bf0df6050ba38fbc7a832c13600b954bf3893870012b798c13ef76d299b31243a1f83287933d20582408d085f76f3d2b3870bcb37cc32a9fb0a0327648c757f7674d51ce7060bf70dbfb89c29ad7dd16d191184401e021c834d38e73ae7b7eeab30346ec2068b9b7a234f4e84c7536a5b32ea1c41dca502d4fe23eb9a2245e1ec0751a36a48fd131a118acc887f750d1c0d0e77c1a6b92ed9274f0031b5e93fc30c8df704bce9eb031f00c52777ecc8f43f45bef98d64272fece775c08b7ee3d1321bdb7cdd51fc3f676cc78c5ffdf421b16faad69ac63d442eb791b4c521d7df1ec7c9f5a8703f4522bb3c7508be7315c8f47235b8fdf2f930400d173e0a0c7544f443deb97a684454273e3d60fdef474d82e1dc3f21e451a512e172f1dbe56c87721dd6812f008e1ac87564108ad8840f4a397b21c47913dffda0a19f2eccf4ae78ff30e8250ba4811e7d1e325822149d2fb9a4a35879f0cb2078ef77213c065936498c1c23ec212b4ee815637790c92257a1bf5434cca2cd015a7c27281eba1ae7648fdcd314a5e9411384196d9a57d2bf5da8bdc28f12f66750c02d54ed261d91cd9eaf2e95fb5f6bcbbb35201611dad675542227760f95389e9efcabc3b28e40d40cf3f1d46c6d4476df941957e4e6fd9a2ddf4933d117be1bcbc554537e4a728d86c10279b30ac5d229a9dfd7254d9c5f5c2a1e2ab6716439616c0e10f6953607ca3e7ce1346bd6dd1c3ba72a7af34fa35fedb0499744242acd9548c6d1703dfa70250b5bb405a57f4c6bd69a4fe0a910982483c9f7aefe2a1f68b52f0d349823e389b66c12a45b47d765acfe572651c5076fb114c1f68b8a66042db412f3fd8073dc9e2022238c5678a9cbe07599e1375c43b5e42a199977844687b2b04d4ad0d4915ab70c30d660d06ff9dca6c5e61f30c185ce1ea910a5a0fa98e30e2dee"}, 0x0})
r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000880)=ANY=[@ANYBLOB="120110038e3ac6309406010013780102030109024600020e06101adaa8080905081020000709800904e405e9b956da020905080000040112ff09050b00200007039a0705d15b89f26d0905090340007a0a84000000000000"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000d80)={0x14, &(0x7f0000000cc0)={0x40, 0x2, 0x68, {0x68, 0x23, "38746bf1effd8e3178f3f915dacd03691263c2fd7f03a3372141b028110666544d59cb0238ce72a6fde480eca89c1fe3eed1353eab563788f718fdb8b36aad4d77fbfb0bbe8c897d110e9e35e059a86bf6168a15a4ca476ec9d88e662b615e67d4f654d30e1a"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000dc0)={0x20, 0x16, 0x3a, "e5787c376f863e610e96f04fd2934c46c9c844b5ca0ed2acfb31feedbd74e0915679f6081b1fa86bc0f84a35f5fde9f3da23fde6105460622b77"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e80)={0x20, 0x80, 0x1c, {0x5, 0x6007, 0xf, 0x7, 0x506d, 0x8, 0x5, 0x5, 0x9, 0x7fff, 0xffff, 0x3}}, &(0x7f0000000ec0)={0x20, 0x85, 0x4, 0x7ff}, &(0x7f0000000f00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f40)={0x20, 0x87, 0x2, 0xfff8}, &(0x7f0000000f80)={0x20, 0x89, 0x2}})
syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000a40)={0x24, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000b00)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000c00)={0x20, 0x3, 0x4, "348b8fae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
read$char_usb(r3, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000406a05030000000000000109022400010000e80b090400000101090581038936050a7000"/54], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000c40)=ANY=[@ANYBLOB="208301000092ced52cffff09ac7d478b744cd93911a76cb42bea06b296306e482e327c08222053a52d1fa95841dacd9c65a0a9653da4ddc04be92337ad041e69a18f06ea37aaf8d5cf6767caa762"], 0x0, 0x0})
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-ioctl$EVIOCSREP-syz_usb_control_io$hid-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
r4 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
ioctl$EVIOCSREP(r3, 0x80086601, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff)
program crashed: WARNING: ODEBUG bug in gb_operation_put
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-ioctl$EVIOCSREP-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
r4 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
ioctl$EVIOCSREP(r3, 0x80086601, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-ioctl$EVIOCSREP
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
r4 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
ioctl$EVIOCSREP(r3, 0x80086601, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_open_dev$evdev-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201100a144ea220e2040114ae34010203010902400002081020020904dc0300027112070a24010400130002010209240604010107000709040101026552cc0309050a", @ANYBLOB="5ecfb74d2822af1c96b45e7ad9956facf74dbecb8a794e32748de94101bb2f9310c3bdebb7fbb3171ac41b62498e9a83f3e722cd103ffa"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[]) (async)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1) (async, rerun: 64)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0) (rerun: 64)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}}) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001") (async)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xd, 0x4c, {0x4c, 0x8, "aaa48199964fc3ec18b2d5b578f49ba4f89543c37ddaee17ba57df146a4a857eba13e4ccf028405d9a4f3858de907795b71a45ec4ee92d979f682a336ef25ada87c95b3f236fb7d59a43"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xef, "a4cb2bebfd77be12d6533701b9ceac4b48ef62e3622fc5f503efa3eae17e385c207b6fd36eabfd18b5ecabda0736f3e6679d683410822b43ed8a0cbd039b98ef07d20e44fd2484ffab08b9e4c5b1cf7090195c1b20c59bead9545f7228adbb71d0add4107c7dc8f93f3e64e67ea967fbed173be51d48c9f6e4619d9a2a58fc98fd16c7dc1fd2b1fa0128ffc28e13c6575b313da41047e972fefc48cf22455929178db916e0ae2d5b13278ab59f99db3f409395f9739679a2b48e264f8d95d8d40be59cbebf4c7b279249f08d1b119c515bd9dfa00e7f99375853c1ba4bb78937a8e405808b207f91a7f4dbb61d54fb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "ee06"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "d7"}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "233de289"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "11359e"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000240))
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
testing program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000280))
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=5m20.973530034s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: WARNING: ODEBUG bug in gb_operation_put
simplifying C reproducer
testing compiled C program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing compiled C program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing compiled C program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing compiled C program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: WARNING: ODEBUG bug in gb_operation_put
testing compiled C program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program crashed: WARNING: ODEBUG bug in gb_operation_put
validation run: crashed=true
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program crashed: WARNING: ODEBUG bug in gb_operation_put
validation run: crashed=true
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
testing program (duration=5m20.973530034s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect$uac1-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
program did not crash
validation run: crashed=false
reproducing took 4h36m25.12356371s
repro crashed as (corrupted=false):
greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888112c56258 object type: timer_list hint: gb_operation_timeout+0x0/0xe0 drivers/greybus/operation.c:1211
WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0 lib/debugobjects.c:629, CPU#1: kworker/u8:0/12
Modules linked in:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: greybus1:0 gb_operation_work
RIP: 0010:debug_print_object+0x1a5/0x2b0 lib/debugobjects.c:629
Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f8 be 37 08 41 56 48 8b 14 ed 40 cf d2 87 4c 89 e6 <67> 48 0f b9 3a 58 83 05 d2 16 33 08 01 48 83 c4 18 5b 5d 41 5c 41
RSP: 0018:ffffc900000cf868 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffffc900000cf950 RCX: 0000000000000000
RDX: ffffffff87d2ce80 RSI: ffffffff87d2ca20 RDI: ffffffff8b1aa8a0
RBP: 0000000000000003 R08: ffff888112c56258 R09: ffffffff87ad4ea0
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff87d2ca20
R13: ffffffff87ad4ee0 R14: ffffffff861dd740 R15: ffffc900000cf968
FS: 0000000000000000(0000) GS:ffff8882684d7000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff720fb76c0 CR3: 000000011753e000 CR4: 00000000003506f0
Call Trace:
__debug_check_no_obj_freed lib/debugobjects.c:1171 [inline]
debug_check_no_obj_freed+0x4da/0x630 lib/debugobjects.c:1201
slab_free_hook mm/slub.c:2679 [inline]
slab_free mm/slub.c:6509 [inline]
kmem_cache_free+0x398/0x650 mm/slub.c:6636
_gb_operation_destroy drivers/greybus/operation.c:682 [inline]
kref_put include/linux/kref.h:65 [inline]
gb_operation_put+0x1b2/0x3c0 drivers/greybus/operation.c:694
gb_operation_sync_timeout+0x193/0x220 drivers/greybus/operation.c:1172
gb_operation_sync include/linux/greybus/operation.h:203 [inline]
gb_svc_pwrmon_rail_count_get drivers/greybus/svc.c:137 [inline]
gb_svc_pwrmon_debugfs_init drivers/greybus/svc.c:772 [inline]
gb_svc_debugfs_init drivers/greybus/svc.c:827 [inline]
gb_svc_hello drivers/greybus/svc.c:875 [inline]
gb_svc_request_handler+0x515/0x1250 drivers/greybus/svc.c:1276
gb_operation_request_handle drivers/greybus/operation.c:243 [inline]
gb_operation_work+0xb7/0x990 drivers/greybus/operation.c:280
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess):
0: b8 00 00 00 00 mov $0x0,%eax
5: 00 fc add %bh,%ah
7: ff lcall (bad)
8: df 48 89 fisttps -0x77(%rax)
b: fa cli
c: 48 c1 ea 03 shr $0x3,%rdx
10: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
14: 75 4f jne 0x65
16: 48 8d 3d f8 be 37 08 lea 0x837bef8(%rip),%rdi # 0x837bf15
1d: 41 56 push %r14
1f: 48 8b 14 ed 40 cf d2 mov -0x782d30c0(,%rbp,8),%rdx
26: 87
27: 4c 89 e6 mov %r12,%rsi
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 58 pop %rax
30: 83 05 d2 16 33 08 01 addl $0x1,0x83316d2(%rip) # 0x8331709
37: 48 83 c4 18 add $0x18,%rsp
3b: 5b pop %rbx
3c: 5d pop %rbp
3d: 41 5c pop %r12
3f: 41 rex.B
final repro crashed as (corrupted=false):
greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888112c56258 object type: timer_list hint: gb_operation_timeout+0x0/0xe0 drivers/greybus/operation.c:1211
WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0 lib/debugobjects.c:629, CPU#1: kworker/u8:0/12
Modules linked in:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: greybus1:0 gb_operation_work
RIP: 0010:debug_print_object+0x1a5/0x2b0 lib/debugobjects.c:629
Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f8 be 37 08 41 56 48 8b 14 ed 40 cf d2 87 4c 89 e6 <67> 48 0f b9 3a 58 83 05 d2 16 33 08 01 48 83 c4 18 5b 5d 41 5c 41
RSP: 0018:ffffc900000cf868 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffffc900000cf950 RCX: 0000000000000000
RDX: ffffffff87d2ce80 RSI: ffffffff87d2ca20 RDI: ffffffff8b1aa8a0
RBP: 0000000000000003 R08: ffff888112c56258 R09: ffffffff87ad4ea0
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff87d2ca20
R13: ffffffff87ad4ee0 R14: ffffffff861dd740 R15: ffffc900000cf968
FS: 0000000000000000(0000) GS:ffff8882684d7000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff720fb76c0 CR3: 000000011753e000 CR4: 00000000003506f0
Call Trace:
__debug_check_no_obj_freed lib/debugobjects.c:1171 [inline]
debug_check_no_obj_freed+0x4da/0x630 lib/debugobjects.c:1201
slab_free_hook mm/slub.c:2679 [inline]
slab_free mm/slub.c:6509 [inline]
kmem_cache_free+0x398/0x650 mm/slub.c:6636
_gb_operation_destroy drivers/greybus/operation.c:682 [inline]
kref_put include/linux/kref.h:65 [inline]
gb_operation_put+0x1b2/0x3c0 drivers/greybus/operation.c:694
gb_operation_sync_timeout+0x193/0x220 drivers/greybus/operation.c:1172
gb_operation_sync include/linux/greybus/operation.h:203 [inline]
gb_svc_pwrmon_rail_count_get drivers/greybus/svc.c:137 [inline]
gb_svc_pwrmon_debugfs_init drivers/greybus/svc.c:772 [inline]
gb_svc_debugfs_init drivers/greybus/svc.c:827 [inline]
gb_svc_hello drivers/greybus/svc.c:875 [inline]
gb_svc_request_handler+0x515/0x1250 drivers/greybus/svc.c:1276
gb_operation_request_handle drivers/greybus/operation.c:243 [inline]
gb_operation_work+0xb7/0x990 drivers/greybus/operation.c:280
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
process_scheduled_works kernel/workqueue.c:3479 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess):
0: b8 00 00 00 00 mov $0x0,%eax
5: 00 fc add %bh,%ah
7: ff lcall (bad)
8: df 48 89 fisttps -0x77(%rax)
b: fa cli
c: 48 c1 ea 03 shr $0x3,%rdx
10: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
14: 75 4f jne 0x65
16: 48 8d 3d f8 be 37 08 lea 0x837bef8(%rip),%rdi # 0x837bf15
1d: 41 56 push %r14
1f: 48 8b 14 ed 40 cf d2 mov -0x782d30c0(,%rbp,8),%rdx
26: 87
27: 4c 89 e6 mov %r12,%rsi
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 58 pop %rax
30: 83 05 d2 16 33 08 01 addl $0x1,0x83316d2(%rip) # 0x8331709
37: 48 83 c4 18 add $0x18,%rsp
3b: 5b pop %rbx
3c: 5d pop %rbp
3d: 41 5c pop %r12
3f: 41 rex.B