Extracting prog: 13m17.254434321s
Minimizing prog: 1h8m56.414957869s
Simplifying prog options: 0s
Extracting C: 1m28.021520531s
Simplifying C: 11m28.598113672s


extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e80)={0x2c, &(0x7f0000000ec0)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000e40)={0x24, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x6, "e2ac5fc4"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb2, 0x3, 0x1, {0x22, 0x5b2}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)={0x40, 0xe}, &(0x7f0000000f80)={0x0, 0xa, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x7f}, 0x0, &(0x7f0000001080)={0x20, 0x3, 0x1, 0x3}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_connect$hid-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$uac2-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 11, 12, 5, 10, 13, 6, 21, 13, 10, 6, 27, 11, 17, 11, 7, 10, 13, 6, 11, 2, 20, 9, 12]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000001600)={0x2c, 0x0, 0x0, &(0x7f0000001480)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "88dc0d73978475d64cc75df60fcfb2d9"}, @generic={0x3, 0x10, 0x4}]}}, &(0x7f0000001580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x5, 0xcf, "dd40136d", "af231b41"}}, &(0x7f00000015c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xfd, 0x7, 0x7d, 0x7f, 0x6}}}, &(0x7f0000001ac0)={0x84, &(0x7f0000001640)={0x40, 0xc, 0xa4, "c2deb8e9549cf8beaba48a3f3bdf4ce9786a892354a92a0198cdc6fcf106336ef89fe46b9012a3a0b7734cad203eb8b7cd61f9f7e91bda13a2285e5dc42f32db72810260c1003437a3ac79b810daabe358c0cd75d1dba0c9da3236db933f3aeff7ff8e5ebdd4d1e446d3833b1a5395540217eeaa813088fa011b596ee3300ee5a71022c5284e92e10dbcaf3f7f8e7d047af4b02289a9985b89f5358df0b2ec6abc24a839"}, 0x0, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x4, 0x80}}, 0x0, &(0x7f0000001840)={0x40, 0x9, 0x1, 0x40}, 0x0, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001900)={0x40, 0x13, 0x6}, &(0x7f0000001940)={0x40, 0x17, 0x6, @local}, &(0x7f0000001980)={0x40, 0x19, 0x2, "5fd3"}, 0x0, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x6}})
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x82, 0x2)
ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377fe"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x59, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203", @ANYRES32=0x0], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000300)={0x0, 0x7, 0x1, 'h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x82, 0x2)
ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e80)={0x2c, &(0x7f0000000ec0)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000001600)={0x2c, 0x0, 0x0, &(0x7f0000001480)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "88dc0d73978475d64cc75df60fcfb2d9"}, @generic={0x3, 0x10, 0x4}]}}, &(0x7f0000001580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x5, 0xcf, "dd40136d", "af231b41"}}, &(0x7f00000015c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xfd, 0x7, 0x7d, 0x7f, 0x6}}}, &(0x7f0000001ac0)={0x84, &(0x7f0000001640)={0x40, 0xc, 0xa4, "c2deb8e9549cf8beaba48a3f3bdf4ce9786a892354a92a0198cdc6fcf106336ef89fe46b9012a3a0b7734cad203eb8b7cd61f9f7e91bda13a2285e5dc42f32db72810260c1003437a3ac79b810daabe358c0cd75d1dba0c9da3236db933f3aeff7ff8e5ebdd4d1e446d3833b1a5395540217eeaa813088fa011b596ee3300ee5a71022c5284e92e10dbcaf3f7f8e7d047af4b02289a9985b89f5358df0b2ec6abc24a839"}, 0x0, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x4, 0x80}}, 0x0, &(0x7f0000001840)={0x40, 0x9, 0x1, 0x40}, 0x0, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001900)={0x40, 0x13, 0x6}, &(0x7f0000001940)={0x40, 0x17, 0x6, @local}, &(0x7f0000001980)={0x40, 0x19, 0x2, "5fd3"}, 0x0, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x6}})
syz_usb_control_io$hid(r0, &(0x7f0000000e40)={0x24, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x6, "e2ac5fc4"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb2, 0x3, 0x1, {0x22, 0x5b2}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)={0x40, 0xe}, &(0x7f0000000f80)={0x0, 0xa, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x7f}, 0x0, &(0x7f0000001080)={0x20, 0x3, 0x1, 0x3}})
executing program 0:
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffe0, 0x8, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x81, 0x46d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x33, 0x8, 0x7443}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x3, 0x4e, 0x0, 0x0)
syz_usb_ep_write(r0, 0x8d, 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x8f, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xf3, 0xcb, 0x5f, 0xff, 0x8dd, 0x988, 0x4e3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0xb, 0xd, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x42, 0x20, 0x35, 0x2, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "af"}, {0x5, 0x24, 0x0, 0xe0}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x95, 0x1}, {0x6, 0x24, 0x1a, 0x200, 0x39}, [@mdlm_detail={0x4, 0x24, 0x13, 0x1d}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x9, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x5, 0x2, 0xa}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0xff, 0x0, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x80}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xf3, 0x8, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x8, 0x6, 0xc0}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331")
executing program 2:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0x3, "aa3d39"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000fc0)={0x1c, &(0x7f0000000780)={0x0, 0x15, 0x3, "47b3bf"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB=' \a\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000580)={0x20, 0x6, 0x3, "96764c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r0, &(0x7f0000001600)={0x2c, 0x0, 0x0, &(0x7f0000001480)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "88dc0d73978475d64cc75df60fcfb2d9"}, @generic={0x3, 0x10, 0x4}]}}, &(0x7f0000001580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x5, 0xcf, "dd40136d", "af231b41"}}, &(0x7f00000015c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xfd, 0x7, 0x7d, 0x7f, 0x6}}}, &(0x7f0000001ac0)={0x84, &(0x7f0000001640)={0x40, 0xc, 0xa4, "c2deb8e9549cf8beaba48a3f3bdf4ce9786a892354a92a0198cdc6fcf106336ef89fe46b9012a3a0b7734cad203eb8b7cd61f9f7e91bda13a2285e5dc42f32db72810260c1003437a3ac79b810daabe358c0cd75d1dba0c9da3236db933f3aeff7ff8e5ebdd4d1e446d3833b1a5395540217eeaa813088fa011b596ee3300ee5a71022c5284e92e10dbcaf3f7f8e7d047af4b02289a9985b89f5358df0b2ec6abc24a839"}, 0x0, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x4, 0x80}}, 0x0, &(0x7f0000001840)={0x40, 0x9, 0x1, 0x40}, 0x0, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001900)={0x40, 0x13, 0x6}, &(0x7f0000001940)={0x40, 0x17, 0x6, @local}, &(0x7f0000001980)={0x40, 0x19, 0x2, "5fd3"}, 0x0, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x6}})
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x82, 0x2)
ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
executing program 0:
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203", @ANYRES32=0x0], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000300)={0x0, 0x7, 0x1, 'h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x82, 0x2)
ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff00000009040101"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
r0 = syz_open_dev$hidraw(&(0x7f0000000980), 0x82, 0x2)
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000009c0)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"})
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
executing program 3:
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffe0, 0x8, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x81, 0x46d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x33, 0x8, 0x7443}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x3, 0x4e, 0x0, 0x0)
syz_usb_ep_write(r0, 0x8d, 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
syz_open_dev$evdev(0x0, 0x0, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e80)={0x2c, &(0x7f0000000ec0)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000e40)={0x24, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x6, "e2ac5fc4"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb2, 0x3, 0x1, {0x22, 0x5b2}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)={0x40, 0xe}, &(0x7f0000000f80)={0x0, 0xa, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x7f}, 0x0, &(0x7f0000001080)={0x20, 0x3, 0x1, 0x3}})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 4 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c08f04127081577e8b7a729366d660fd50df219405848a"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "85fdc19034c96be07d2e3da712ffe22a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0xfe, 0x4}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x1, 0x2, 0x7, "23e7f33c", "b8bfeb71"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x5, 0x40, 0x0, 0x2, 0x4}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="948a7318b1767bd1b0296865fdc18ce098198a76a2a7aad893d590f01236acb2ae0de3603b0e09b269c5a7373a6d205b757d3ae26481e814646c4ecfb0f080deffdfbf"], 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f074"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'C0'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x70}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e80)={0x2c, &(0x7f0000000ec0)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000e40)={0x24, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x6, "e2ac5fc4"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb2, 0x3, 0x1, {0x22, 0x5b2}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)={0x40, 0xe}, &(0x7f0000000f80)={0x0, 0xa, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x7f}, 0x0, &(0x7f0000001080)={0x20, 0x3, 0x1, 0x3}})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_connect$hid-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_connect$hid-syz_open_dev$evdev-syz_usb_connect$cdc_ecm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000"], 0x0)

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_connect$hid-syz_open_dev$evdev
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01)

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_connect$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5, &(0x7f00000003c0)=ANY=[])
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac3-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000240))
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000280))

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
program crashed: WARNING: ODEBUG bug in corrupted
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000300)='\x00\x00\x00')
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000240)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000280)="0b00020002000000010001")

program crashed: WARNING: ODEBUG bug in gb_operation_sync_timeout
validation run: crashed=true
reproducing took 1h42m24.718058891s
repro crashed as (corrupted=false):
greybus greybus4: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888075630a00 object type: timer_list hint: gb_operation_timeout+0x0/0x110 drivers/greybus/operation.c:1265
WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230 lib/debugobjects.c:629, CPU#1: kworker/u8:6/149
Modules linked in:
CPU: 1 UID: 0 PID: 149 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Workqueue: greybus4:svc gb_svc_process_deferred_request
RIP: 0010:debug_print_object+0x18a/0x230 lib/debugobjects.c:629
Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3d e8 3d fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 c3 91 bc 0c 48 83 c4 10 5b 41 5c
RSP: 0018:ffffc90002ee77e0 EFLAGS: 00010246
RAX: 1ffffffff185f41c RBX: dffffc0000000000 RCX: 0000000000000000
RDX: ffffffff8c8fc940 RSI: ffffffff8c8fc3c0 RDI: ffffffff91c881b0
RBP: ffffffff8c8fc940 R08: ffff888075630a00 R09: ffffffff8c2fb440
R10: dffffc0000000000 R11: ffffffff81b4d3d0 R12: 0000000000000000
R13: ffffffff91c881b0 R14: ffff888075630a00 R15: ffffffff8c2fa0e0
FS:  0000000000000000(0000) GS:ffff8881234f7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc2b5670220 CR3: 000000007e8ec000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1171 [inline]
 debug_check_no_obj_freed+0x2e3/0x450 lib/debugobjects.c:1201
 slab_free_hook mm/slub.c:2711 [inline]
 slab_free mm/slub.c:6630 [inline]
 kmem_cache_free+0xfd/0x650 mm/slub.c:6757
 gb_operation_sync_timeout+0x1c7/0x270 drivers/greybus/operation.c:1172
 gb_operation_sync include/linux/greybus/operation.h:203 [inline]
 gb_svc_intf_set_power_mode drivers/greybus/svc.c:584 [inline]
 gb_svc_process_hello_deferred drivers/greybus/svc.c:936 [inline]
 gb_svc_process_deferred_request+0x5f3/0x1150 drivers/greybus/svc.c:1102
 process_one_work kernel/workqueue.c:3495 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	f8                   	clc
   1:	48 c1 e8 03          	shr    $0x3,%rax
   5:	80 3c 18 00          	cmpb   $0x0,(%rax,%rbx,1)
   9:	74 08                	je     0x13
   b:	4c 89 ff             	mov    %r15,%rdi
   e:	e8 3d e8 3d fd       	call   0xfd3de850
  13:	4d 8b 0f             	mov    (%r15),%r9
  16:	4c 89 ef             	mov    %r13,%rdi
  19:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
  1e:	48 89 ea             	mov    %rbp,%rdx
  21:	44 89 e1             	mov    %r12d,%ecx
  24:	4d 89 f0             	mov    %r14,%r8
  27:	ff 34 24             	push   (%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	ff 05 c3 91 bc 0c    	incl   0xcbc91c3(%rip)        # 0xcbc91fc
  39:	48 83 c4 10          	add    $0x10,%rsp
  3d:	5b                   	pop    %rbx
  3e:	41 5c                	pop    %r12

final repro crashed as (corrupted=false):
greybus greybus4: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888075630a00 object type: timer_list hint: gb_operation_timeout+0x0/0x110 drivers/greybus/operation.c:1265
WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230 lib/debugobjects.c:629, CPU#1: kworker/u8:6/149
Modules linked in:
CPU: 1 UID: 0 PID: 149 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Workqueue: greybus4:svc gb_svc_process_deferred_request
RIP: 0010:debug_print_object+0x18a/0x230 lib/debugobjects.c:629
Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3d e8 3d fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 c3 91 bc 0c 48 83 c4 10 5b 41 5c
RSP: 0018:ffffc90002ee77e0 EFLAGS: 00010246
RAX: 1ffffffff185f41c RBX: dffffc0000000000 RCX: 0000000000000000
RDX: ffffffff8c8fc940 RSI: ffffffff8c8fc3c0 RDI: ffffffff91c881b0
RBP: ffffffff8c8fc940 R08: ffff888075630a00 R09: ffffffff8c2fb440
R10: dffffc0000000000 R11: ffffffff81b4d3d0 R12: 0000000000000000
R13: ffffffff91c881b0 R14: ffff888075630a00 R15: ffffffff8c2fa0e0
FS:  0000000000000000(0000) GS:ffff8881234f7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc2b5670220 CR3: 000000007e8ec000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1171 [inline]
 debug_check_no_obj_freed+0x2e3/0x450 lib/debugobjects.c:1201
 slab_free_hook mm/slub.c:2711 [inline]
 slab_free mm/slub.c:6630 [inline]
 kmem_cache_free+0xfd/0x650 mm/slub.c:6757
 gb_operation_sync_timeout+0x1c7/0x270 drivers/greybus/operation.c:1172
 gb_operation_sync include/linux/greybus/operation.h:203 [inline]
 gb_svc_intf_set_power_mode drivers/greybus/svc.c:584 [inline]
 gb_svc_process_hello_deferred drivers/greybus/svc.c:936 [inline]
 gb_svc_process_deferred_request+0x5f3/0x1150 drivers/greybus/svc.c:1102
 process_one_work kernel/workqueue.c:3495 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	f8                   	clc
   1:	48 c1 e8 03          	shr    $0x3,%rax
   5:	80 3c 18 00          	cmpb   $0x0,(%rax,%rbx,1)
   9:	74 08                	je     0x13
   b:	4c 89 ff             	mov    %r15,%rdi
   e:	e8 3d e8 3d fd       	call   0xfd3de850
  13:	4d 8b 0f             	mov    (%r15),%r9
  16:	4c 89 ef             	mov    %r13,%rdi
  19:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
  1e:	48 89 ea             	mov    %rbp,%rdx
  21:	44 89 e1             	mov    %r12d,%ecx
  24:	4d 89 f0             	mov    %r14,%r8
  27:	ff 34 24             	push   (%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	ff 05 c3 91 bc 0c    	incl   0xcbc91c3(%rip)        # 0xcbc91fc
  39:	48 83 c4 10          	add    $0x10,%rsp
  3d:	5b                   	pop    %rbx
  3e:	41 5c                	pop    %r12