Extracting prog: 1m59.617245968s
Minimizing prog: 14m14.998397362s
Simplifying prog options: 0s
Extracting C: 1m9.729214067s
Simplifying C: 18m15.496736678s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x65, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x8, 0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf9, 0x2, 0x3f, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x2, 0x7e}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x65, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x8, 0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf9, 0x2, 0x3f, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x2, 0x7e}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x65, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x8, 0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf9, 0x2, 0x3f, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x2, 0x7e}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xa, 0xd2, 0x40, 0x5ac, 0x24e, 0xd4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0x3, 0xec, 0x2, 0x0, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8136a5545b"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x7f, "92a7d8181753a052f534fd8813c4b82a85a6bd96988850b68b1d74e3b83876e7830e018abb0c34c16a8e38f4e51e018deaf7807a1ed6fb8db03b16ce232a7b2f62e5c91a57354ba8199a9c80964c0e46071b7932e010fcd73b26cf79b43709723698ddcaade084719f18e594f373ad2e5442ecb1caaa4ae30fdc5cc3d1c4c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
extracting C reproducer
testing compiled C program (duration=59.023945831s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
simplifying C reproducer
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in corrupted/usb_submit_urb
a never seen crash title: WARNING in corrupted/usb_submit_urb, ignore
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in corrupted/usb_submit_urb
a never seen crash title: WARNING in corrupted/usb_submit_urb, ignore
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program did not crash
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in corrupted/usb_submit_urb
a never seen crash title: WARNING in corrupted/usb_submit_urb, ignore
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=59.023945831s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
reproducing took 35m39.841619165s
repro crashed as (corrupted=false):
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 3532 at drivers/usb/core/urb.c:503 usb_submit_urb+0xc8d/0x1990 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 3532 Comm: acpid Not tainted 5.15.179-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:usb_submit_urb+0xc8d/0x1990 drivers/usb/core/urb.c:502
Code: 0f b6 04 18 84 c0 44 8b 64 24 1c 0f 85 2b 09 00 00 45 8b 07 48 c7 c7 40 d4 44 8b 48 8b 74 24 08 4c 89 f2 89 e9 e8 63 7b 1f fb <0f> 0b 48 8b 5c 24 20 48 8b 6c 24 28 41 89 de 4c 89 f7 48 c7 c6 d0
RSP: 0018:ffffc90002d1f5b0 EFLAGS: 00010246
RAX: 7b0164bc78fabb00 RBX: dffffc0000000000 RCX: ffff88807e1dbb80
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff8166be4c R09: ffffed10171c67a8
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
R13: ffff88801af91200 R14: ffff88801c2d7960 R15: ffffffff8b44d228
FS:  00007f264816b740(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c90dbfad58 CR3: 000000001f347000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bcm5974_start_traffic+0xd5/0x140 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x8e/0x120 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x188/0x2d0 drivers/input/input.c:640
 mousedev_open_device+0xc3/0x160 drivers/input/mousedev.c:430

final repro crashed as (corrupted=false):
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 3532 at drivers/usb/core/urb.c:503 usb_submit_urb+0xc8d/0x1990 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 3532 Comm: acpid Not tainted 5.15.179-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:usb_submit_urb+0xc8d/0x1990 drivers/usb/core/urb.c:502
Code: 0f b6 04 18 84 c0 44 8b 64 24 1c 0f 85 2b 09 00 00 45 8b 07 48 c7 c7 40 d4 44 8b 48 8b 74 24 08 4c 89 f2 89 e9 e8 63 7b 1f fb <0f> 0b 48 8b 5c 24 20 48 8b 6c 24 28 41 89 de 4c 89 f7 48 c7 c6 d0
RSP: 0018:ffffc90002d1f5b0 EFLAGS: 00010246
RAX: 7b0164bc78fabb00 RBX: dffffc0000000000 RCX: ffff88807e1dbb80
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff8166be4c R09: ffffed10171c67a8
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
R13: ffff88801af91200 R14: ffff88801c2d7960 R15: ffffffff8b44d228
FS:  00007f264816b740(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c90dbfad58 CR3: 000000001f347000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bcm5974_start_traffic+0xd5/0x140 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x8e/0x120 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x188/0x2d0 drivers/input/input.c:640
 mousedev_open_device+0xc3/0x160 drivers/input/mousedev.c:430