Extracting prog: 10m52.031693886s
Minimizing prog: 29m59.756815295s
Simplifying prog options: 0s
Extracting C: 25.690457507s
Simplifying C: 4m20.202326283s


extracting reproducer from 22 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$llc-connect$llc
detailed listing:
executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020005240600010705810308001009040100020a0000000705820200020007050202000200"], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x19, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x17})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_io_uring_setup-openat$dlm_control-syz_io_uring_submit-io_uring_enter-nanosleep-openat-write-nanosleep-openat-write-nanosleep-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000100), &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000500)=@IORING_OP_WRITEV={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006c736e616d6500"/112, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r6, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r7, &(0x7f0000000a00)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/dlm/lsname/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000c00)='1\x00', 0x2)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-bind$inet-listen-openat$nvme_fabrics-write-nanosleep-accept$inet-write-nanosleep
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10)
listen(r0, 0x1)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r1, &(0x7f00000000c0)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41)
nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0)
r2 = accept$inet(r0, 0x0, 0x0)
write(r2, &(0x7f0000000140)="01008000800000000000000200004000"/128, 0x80)
nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 22 programs with base timeout 30s
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 5, 16, 8, 9, 5, 12, 2, 1, 21, 9, 23, 31, 1, 5, 9, 18, 21, 4, 31, 3, 2]
detailed listing:
executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x60600, 0x900)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='1.0\n', 0x4)
read(r1, &(0x7f00000002c0)=""/100, 0x64)
executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x20000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x20000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x20000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x20000000, 0x0, 0x80000})
executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405e04da0700000000000109022900010100803209040000020300000009211101000122c0000705810340000107050203400001"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022c000000005200973a100850105200a09031500250275089501a1020a30080a31080a3208b100c00a16031500250575089501a1020a40080a41080a42080a43080a44080a4508b100c00a19031500250575089501a1020a50080a51080a52080a53080a54080a5508b100c00a01021500250675089501a1020a00080a01080a02080a03080a04080a05080a0608b100c00a0e03150027ffffffff752095015500b1020a5214150026ffff75109501550eb1020a522416018026ff7f75109501550eb1020a523416018026ff7f75109501550eb10205200a01021500250675089501a1020a00080a01080a02080a03080a04080a05080a06088100c00a02021500250575089501a1020a10080a11080a12080a13080a14080a15088100c00a5304170000018027ffffffff75209501550e81020a5404170000018027ffffffff75209501550e81020a5504170000018027ffffff7f75209501550e81020a510415002501750895018102c0"], 0x0}, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010f000000010101010100"/21], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/iio/devices/iio:device0/buffer/enable\x00', 0x2, 0x0)
write(r1, &(0x7f0000000900)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/iio/devices/iio:device1/buffer/enable\x00', 0x2, 0x0)
write(r2, &(0x7f0000000900)='1\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/iio/devices/iio:device2/buffer/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000900)='1\x00', 0x2)
executing program 2:
clock_settime(0x0, &(0x7f0000000000)={0x1517e})
clock_adjtime(0x0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000000), 0x1000000, 0x0)
getrandom(&(0x7f0000000000), 0x1000000, 0x0)
getrandom(&(0x7f0000000000), 0x1000000, 0x0)
getrandom(&(0x7f0000000000), 0x1000000, 0x0)
getrandom(&(0x7f0000000000), 0x1000000, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10)
listen(r0, 0x1)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r1, &(0x7f00000000c0)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41)
nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0)
r2 = accept$inet(r0, 0x0, 0x0)
write(r2, &(0x7f0000000140)="01008000800000000000000200004000"/128, 0x80)
nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/bitmap/max_write_behind\x00', 0x1, 0x0)
executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000140)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000180)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000001c0)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000200)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000240)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000280)={0x1000000, 0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000002c0)={0x1000000, 0x0})
executing program 2:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff405e0491021401010203010902200001010080fa0904000002ff5d81000705810300000407050203200004"], 0x0)
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110))
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1:1\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='0\n', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000440)='1\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r7, &(0x7f00000004c0)='writemostly\n', 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r8, &(0x7f00000005c0)='frozen\n', 0x7)
executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='test\x00', 0x0)
write(r1, &(0x7f0000001000)="4f4f4f4fffffffff00"/44, 0x2c)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x1000})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x1000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002000)}, 0x1000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff)
ftruncate(r0, 0x1000000)
pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/228, 0x100, 0x1000)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='md0\x00', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='7:0\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='raid1\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0)
write(r6, &(0x7f00000005c0)='0\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000640)='active\x00', 0x7)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0)
write(r8, &(0x7f00000006c0)='none\x00', 0x5)
write(r8, &(0x7f0000000700)='8\n', 0x2)
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})
executing program 3:
nanosleep(&(0x7f0000001d00)={0x0, 0xf4240}, 0x0)
executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x30000000, 0x0, 0x80000})
executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x82, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000100), &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000500)=@IORING_OP_WRITEV={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006c736e616d6500"/112, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r6, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r7, &(0x7f0000000a00)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/dlm/lsname/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000c00)='1\x00', 0x2)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1:1\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='0\n', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000440)='1\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r7, &(0x7f00000004c0)='writemostly\n', 0xc)
write(0xffffffffffffffff, &(0x7f0000000540)='readonly\n', 0x9)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r8, &(0x7f00000005c0)='frozen\n', 0x7)
executing program 3:
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./dm_control_12345\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./dm_control_12345\x00', 0x81b6, 0xaec)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dm_control_12345\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f64657600")
executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x40000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x80000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0xc0000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000f00000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
munmap(&(0x7f0000f00000/0x100000)=nil, 0x100000)
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020005240600010705810308001009040100020a0000000705820200020007050202000200"], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x19, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x17})
executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) (async)

program crashed: WARNING in cx25840_init
bisect: bisecting 22 programs
bisect: split chunks (needed=false): <22>
bisect: split chunk #0 of len 22 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21, 9, 23, 31, 1, 5, 9, 18, 21, 4, 31, 3, 2]
detailed listing:
executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110))
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1:1\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='0\n', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000440)='1\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r7, &(0x7f00000004c0)='writemostly\n', 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r8, &(0x7f00000005c0)='frozen\n', 0x7)
executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='test\x00', 0x0)
write(r1, &(0x7f0000001000)="4f4f4f4fffffffff00"/44, 0x2c)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x1000})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x1000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002000)}, 0x1000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff)
ftruncate(r0, 0x1000000)
pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/228, 0x100, 0x1000)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='md0\x00', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='7:0\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='raid1\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0)
write(r6, &(0x7f00000005c0)='0\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000640)='active\x00', 0x7)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0)
write(r8, &(0x7f00000006c0)='none\x00', 0x5)
write(r8, &(0x7f0000000700)='8\n', 0x2)
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})
executing program 3:
nanosleep(&(0x7f0000001d00)={0x0, 0xf4240}, 0x0)
executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x30000000, 0x0, 0x80000})
executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x82, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000100), &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000500)=@IORING_OP_WRITEV={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006c736e616d6500"/112, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r6, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r7, &(0x7f0000000a00)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/dlm/lsname/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000c00)='1\x00', 0x2)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1:1\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='0\n', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000440)='1\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r7, &(0x7f00000004c0)='writemostly\n', 0xc)
write(0xffffffffffffffff, &(0x7f0000000540)='readonly\n', 0x9)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r8, &(0x7f00000005c0)='frozen\n', 0x7)
executing program 3:
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./dm_control_12345\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./dm_control_12345\x00', 0x81b6, 0xaec)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dm_control_12345\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f64657600")
executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x40000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x80000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0xc0000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000f00000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
munmap(&(0x7f0000f00000/0x100000)=nil, 0x100000)
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020005240600010705810308001009040100020a0000000705820200020007050202000200"], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x19, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x17})
executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) (async)

program crashed: WARNING in cx25840_init
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 21, 4, 31, 3, 2]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000100), &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000500)=@IORING_OP_WRITEV={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006c736e616d6500"/112, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r6, &(0x7f0000000a00)='1\x00', 0x2)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/lsname/event_done\x00', 0x1, 0x0)
write(r7, &(0x7f0000000a00)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/dlm/lsname/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000c00)='1\x00', 0x2)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1:1\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='0\n', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000440)='1\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r7, &(0x7f00000004c0)='writemostly\n', 0xc)
write(0xffffffffffffffff, &(0x7f0000000540)='readonly\n', 0x9)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r8, &(0x7f00000005c0)='frozen\n', 0x7)
executing program 3:
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./dm_control_12345\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./dm_control_12345\x00', 0x81b6, 0xaec)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dm_control_12345\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f64657600")
executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x40000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0x80000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x11, r0, 0xc0000000)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x16)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000)
mmap(&(0x7f0000f00000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
munmap(&(0x7f0000f00000/0x100000)=nil, 0x100000)
executing program 0:
syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020005240600010705810308001009040100020a0000000705820200020007050202000200"], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x19, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x17})
executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) (async)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21, 9, 23, 31, 1, 5, 9]
detailed listing:
executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110))
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:0\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='1:1\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='0\n', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r6, &(0x7f0000000440)='1\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r7, &(0x7f00000004c0)='writemostly\n', 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0)
write(r8, &(0x7f00000005c0)='frozen\n', 0x7)
executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='test\x00', 0x0)
write(r1, &(0x7f0000001000)="4f4f4f4fffffffff00"/44, 0x2c)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x1000})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x1000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002000)}, 0x1000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dummy.img\x00', 0x42, 0x1ff)
ftruncate(r0, 0x1000000)
pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/228, 0x100, 0x1000)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='md0\x00', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='7:0\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='raid1\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0)
write(r6, &(0x7f00000005c0)='0\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000640)='active\x00', 0x7)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0)
write(r8, &(0x7f00000006c0)='none\x00', 0x5)
write(r8, &(0x7f0000000700)='8\n', 0x2)
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})
executing program 3:
nanosleep(&(0x7f0000001d00)={0x0, 0xf4240}, 0x0)
executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x30000000, 0x0, 0x80000})
executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x82, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0)

program crashed: WARNING in cx25840_init
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [31, 1, 5, 9]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})
executing program 3:
nanosleep(&(0x7f0000001d00)={0x0, 0xf4240}, 0x0)
executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x30000000, 0x0, 0x80000})
executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x82, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0)

program crashed: WARNING in cx25840_init
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9]
detailed listing:
executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000040)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000080)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f00000000c0)={0x30000000, 0x0, 0x80000})
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000100)={0x30000000, 0x0, 0x80000})
executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x82, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [31, 1]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})
executing program 3:
nanosleep(&(0x7f0000001d00)={0x0, 0xf4240}, 0x0)

program crashed: WARNING in cx25840_init
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): nanosleep
detailed listing:
executing program 3:
nanosleep(&(0x7f0000001d00)={0x0, 0xf4240}, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-nanosleep-mkdirat-mount-openat-ioctl$VIDIOC_TRY_FMT
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})

program crashed: WARNING in cx25840_init
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-nanosleep-mkdirat-mount-openat-ioctl$VIDIOC_TRY_FMT
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}})

program crashed: WARNING in cx25840_init
bisect: concatenation succeeded
found reproducer with 31 syscalls
minimizing guilty program
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-nanosleep-mkdirat-mount-openat
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-nanosleep-mkdirat-mount
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-nanosleep-mkdirat
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b')

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in corrupted
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in corrupted
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00')

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884")

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
simplifying C reproducer
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program did not crash
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
program crashed: WARNING in cx25840_init
testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
validation run: crashed=true
testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
validation run: crashed=true
testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902630001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff0000000705010200020007058102000200070582010002010904000603ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64)

program crashed: WARNING in cx25840_init
validation run: crashed=true
reproducing took 47m53.803674758s
repro crashed as (corrupted=false):
dvb-usb: bulk message failed: -71 (6/0)
dvb-usb: bulk message failed: -71 (9/0)
dvb-usb: bulk message failed: -71 (9/0)
------------[ cut here ]------------
1
WARNING: drivers/media/i2c/cx25840/cx25840-core.c:2313 at cx25840_init drivers/media/i2c/cx25840/cx25840-core.c:2313 [inline], CPU#2: kworker/2:0/25
WARNING: drivers/media/i2c/cx25840/cx25840-core.c:2313 at cx25840_init+0x90/0x120 drivers/media/i2c/cx25840/cx25840-core.c:2288, CPU#2: kworker/2:0/25
Modules linked in:
CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:cx25840_init drivers/media/i2c/cx25840/cx25840-core.c:2313 [inline]
RIP: 0010:cx25840_init+0x90/0x120 drivers/media/i2c/cx25840/cx25840-core.c:2288
Code: 74 08 3c 03 0f 8e 95 00 00 00 8b 83 f8 02 00 00 bf 03 00 00 00 8d 68 fc 89 ee e8 ab 6f f0 f9 83 fd 03 76 19 e8 31 75 f0 f9 90 <0f> 0b 90 e8 28 75 f0 f9 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 18 75
RSP: 0018:ffffc9000063ee40 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880262b0040 RCX: 0000000000000000
RDX: ffff88801fa80000 RSI: ffffffff881b7adf RDI: ffff88801fa80000
RBP: 00000000fffffffd R08: 0000000000000005 R09: 0000000000000003
R10: 00000000fffffffd R11: 000000000000761b R12: 00000000000ac8aa
R13: ffff8880262b0040 R14: 0000000000000000 R15: ffffc9000063eec0
FS:  0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000013e56cc094b8 CR3: 0000000027d56000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 cxusb_medion_register_analog_subdevs drivers/media/usb/dvb-usb/cxusb-analog.c:1730 [inline]
 cxusb_medion_register_analog+0x359/0x1280 drivers/media/usb/dvb-usb/cxusb-analog.c:1793
 cxusb_probe.cold+0x61/0xc2 drivers/media/usb/dvb-usb/cxusb.c:1615
 usb_probe_interface+0x386/0x9b0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
dvb-usb: bulk message failed: -71 (6/0)
dvb-usb: bulk message failed: -71 (9/0)
dvb-usb: bulk message failed: -71 (9/0)
------------[ cut here ]------------
1
WARNING: drivers/media/i2c/cx25840/cx25840-core.c:2313 at cx25840_init drivers/media/i2c/cx25840/cx25840-core.c:2313 [inline], CPU#2: kworker/2:0/25
WARNING: drivers/media/i2c/cx25840/cx25840-core.c:2313 at cx25840_init+0x90/0x120 drivers/media/i2c/cx25840/cx25840-core.c:2288, CPU#2: kworker/2:0/25
Modules linked in:
CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:cx25840_init drivers/media/i2c/cx25840/cx25840-core.c:2313 [inline]
RIP: 0010:cx25840_init+0x90/0x120 drivers/media/i2c/cx25840/cx25840-core.c:2288
Code: 74 08 3c 03 0f 8e 95 00 00 00 8b 83 f8 02 00 00 bf 03 00 00 00 8d 68 fc 89 ee e8 ab 6f f0 f9 83 fd 03 76 19 e8 31 75 f0 f9 90 <0f> 0b 90 e8 28 75 f0 f9 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 18 75
RSP: 0018:ffffc9000063ee40 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880262b0040 RCX: 0000000000000000
RDX: ffff88801fa80000 RSI: ffffffff881b7adf RDI: ffff88801fa80000
RBP: 00000000fffffffd R08: 0000000000000005 R09: 0000000000000003
R10: 00000000fffffffd R11: 000000000000761b R12: 00000000000ac8aa
R13: ffff8880262b0040 R14: 0000000000000000 R15: ffffc9000063eec0
FS:  0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000013e56cc094b8 CR3: 0000000027d56000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 cxusb_medion_register_analog_subdevs drivers/media/usb/dvb-usb/cxusb-analog.c:1730 [inline]
 cxusb_medion_register_analog+0x359/0x1280 drivers/media/usb/dvb-usb/cxusb-analog.c:1793
 cxusb_probe.cold+0x61/0xc2 drivers/media/usb/dvb-usb/cxusb.c:1615
 usb_probe_interface+0x386/0x9b0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>