Extracting prog: 3m9.166251608s
Minimizing prog: 24m56.985930832s
Simplifying prog options: 0s
Extracting C: 1m10.64248066s
Simplifying C: 6m28.701085788s


extracting reproducer from 79 programs
testing a last program of every proc
single: executing 29 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-setsockopt$IPT_SO_SET_REPLACE
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x3e8, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x0, 0x0, 0xfffffffe}, {}, {0x1, 0xb}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0xdf16}, {}, {}, {}, {}, {}, {}, {}, {}, {0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFQNL_MSG_VERDICT_BATCH-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_unlabel-sendmsg$NLBL_UNLABEL_C_STATICADD-ioctl$sock_SIOCGIFINDEX_802154-ioctl$sock_SIOCGIFINDEX_802154-ioctl$sock_SIOCGIFINDEX_802154-ioctl$sock_SIOCGIFINDEX_802154-ioctl$sock_SIOCGIFINDEX_802154-sendmsg$IEEE802154_LIST_IFACE-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$ieee802154-sendmsg$IEEE802154_LIST_IFACE-syz_usb_connect-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_mgmt-sendmsg$NLBL_MGMT_C_ADD-socket$nl_generic-sendmsg$TIPC_NL_KEY_SET-syz_usb_connect$cdc_ncm-socket$nl_netfilter-sendmsg$NFT_MSG_GETSET-mount-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_calipso-socket$inet_icmp_raw-getsockopt$inet_IP_XFRM_POLICY-socketpair$nbd-sendmsg$NBD_CMD_DISCONNECT-syz_genetlink_get_family_id$nbd
detailed listing:
executing program 0:
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x3, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c5)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', <r6=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0)
sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x59c7fa7e2532d5bc)
syz_usb_connect(0x4, 0x8e8, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2f, 0xd6, 0x81, 0xff, 0x12d1, 0x2f0e, 0xebba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d6, 0x4, 0x4, 0x6, 0x10, 0x8, "", [{{0x9, 0x4, 0x7b, 0xb8, 0x5, 0xff, 0x4, 0x5, 0x81, [], [{{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xfa, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x57}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x3, 0x2}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x1, 0x9, 0x9, [@generic={0xf8, 0x1, "946fc8d32902ea36aed99657d5cd0c694c4182765f4c801646a88a2e9d722e4bf3724e2bbff9756d3f6e13cf70cc41adba5caa59a8002169288d0a6b505d5b6527540f6e237212007e16eab60a617daa289cdefbc0b5e79bc05b647fe99e25ffeebd0cb6e4ef08b693379408e67f1c0279f3bbf134d97bf03f6cd64667c7de25a80d1f59508037dd2e183f1c6fc4b8ef57fb070bc598cc53a57358fe321ba1fa3595c4ccdb79b6beaad3009270e1a9aa621771de11c5a789fd36ae7f6a48546c553e6bf38d5633997df91e1b0c6d21436b6af89a5c32a3c74729b6b8319ec63a389c6affef8af09b08aad9052a4563408f628b861f9f"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x9, 0x1, 0x1a}}]}}, {{0x9, 0x4, 0x53, 0x5, 0xa, 0xeb, 0x71, 0x76, 0x5, [], [{{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x99, 0x67, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xa, 0x5, 0x0, [@generic={0x6e, 0x22, "965786c3636275a6373ac89b4b0e40233cfd396c80ce36d386351bc842208e08bdd1575d4fbb157f4a108989c69d97d9b1b84c9be9b6d7a9f1050e2a26b0cd86464711af1501a168c68ee334ea66654bf49ef20ba4874215db7be901a46bffe517b2286d8617421996e69be4"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0xee, 0x9a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x95, 0x200}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xf, 0x5c, 0x2}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x0, 0x5, 0x4e, [@generic={0x33, 0x20, "aa020496f5d732d342e7e4f42446a4b64145a625c776eb1e942eec5c70d7b144011bbd4f6e4805c677fcf5382668c15e4c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0xa, 0x40}}, {{0x9, 0x5, 0x5, 0x10, 0x270, 0x7, 0x6, 0xc5}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xf8, 0x1, 0x7, [@generic={0xa2, 0x8, "eda0673a511ed0e72becd883c1e3aaa2d21976ff58215f8f76f577ea6f57382dd06ce436a051a968adc33c84b7bb3b9b3ea9bc36373f155824651f217ff450d8892be45aefb9ea594cf4da85391c00e8f6fc454cb44bc353be283b0875abd2f9ccbb6b65869f3f2bf1456673c682ca5dac45d61f769af6a9a2a54f42549046b68f74c337ae0cee73fad6b38a9674817b07b7e71a88f934c392a445973175966d"}, @generic={0xb8, 0x4, "e76a2b1315c03eabbac31f5b4c6452e530ffd83c00515d2d19be763f0fc96717af067951735230fcc221d0165b0f033482207f3224e5e698fc6e3264bccc633e7363eb25e3facb2906fe389b9b98f572c966aaa23ba2f43800d77296bd413ddeaf8a225229bc9f4deb06374dd5365ad9c836e231f18ca9b8e6dfc07ef83b3129f39282833fd35b3959df268d2a928e4ea74ecf8efec6fd686cbe7d006b7cf091a1f11bbb5d08c6e4d3a23a98c0df4a7afe2bee760626"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x1, 0xfe, 0x4, [@generic={0xb4, 0x31, "a8324f934c384602715632806e9df453a11fe659c2ebc10b5f9375710a567fa6bf080843274927e2d1ff728c9ff2d61c65916c2faa0b97717ffdaa045071aaf79c71447e62c7c7484caded639b7fa1185cb12236a0e19b36c3391dc64f8177c592cfe1ccabcbe54f37723c2358870341d330f2e8012b3fe911278301a27388d10d082d907f9a84e0280acb73bab4623c9a2fa61733696942d3f1d7bc8a6c21a2a7410f2d2ed3b16ef9458d63bb86e20dced1"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x8, 0x1, 0x1, [@generic={0xbf, 0x22, "93b0b4853add8bb791c77566d7afaf59b0c80901372e73506e6838beb7a36be1cef747807cd6bc8054cb74a50471457296658708e24b48f9fa8cff28c854ce889c11cf2e56b1223a59f741487ba42076c2d3b807a5e029bccea93ecefa117eeffa43f39e3d64f82cde1dc861cb0432b2756843b6561c209e461b4d9decb4990fa87e57bd0fe59c6f89f39bef103bb8aa225da3eeaa53a6bf83440969d86612414239ab25a78363dfcac0eaabfe4308a83fd7f9ac3082d066f558b9d0e5"}]}}]}}, {{0x9, 0x4, 0x22, 0x6, 0x10, 0xcb, 0xed, 0x68, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a408"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfff6, 0x1, 0x7}}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0xfd, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x6}]}}, {{0x9, 0x5, 0x1, 0xc, 0x220, 0x9, 0x3, 0x0, [@generic={0x4, 0x31, "81e4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x3, 0x10, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x8, 0x9c, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0xbb, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x1, 0x9, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xbe, 0xc, 0x2e, [@generic={0xa5, 0x21, "72a4100afde17a318cd3ba089de325da465f12caad31a525105ff5e0c177243462178dd92da67ef8fe23f00c889f5cc34910906001737e48f1804adf637c8367ac1377d3185c5e8ae1deae734f7301e423302872704e7a2938ff1df44359a988d4b9272adbf94cbd0cdab6356238a48a4aa47d2ecc911d0b96ca6c4a384a009bd2e8444c99ff652f9a0c6b21ab332b52afd83d23fbd075566b8ce03f2aebbd1a5896c4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x22, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x1, 0x2, 0xf9}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xff, 0x5, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3e7, 0x7, 0x7, 0xfb}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x5, 0x8, 0xff, [@generic={0x38, 0x22, "f017246906fd5e2f2969129d87444f227ec7d3e4b2b79922c4b8808ae8a0f6f206bb855e86f49045feb35fcbd14677deb2be970235f8"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0x58, 0xc}}, {{0x9, 0x5, 0x7, 0x3, 0x408, 0x1, 0x2, 0xd8}}]}}, {{0x9, 0x4, 0x38, 0x5, 0x3, 0xc7, 0x5f, 0x52, 0x9, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0xb, 0x5, [@generic={0xcc, 0x2, "91f38fa2a6d2efc773b27c4f2469cb185b24e6e838dad5dc49bbf42f414c664a4419d821eb5a65fb0f1b3112faea41782126d25af3a18712ba27435a6d68d6aa5e147e8040c713adc853acb231697c64edd6a90ee67d32937c72f395f582be3985a578f67ac944cbe8fefc822036f2b2fa4a8d60b2dec84663fba9196da41cfd0e504d0a6adad4e2bc11d56ef47203d2ccb669a806242ee67d5f3037d9a9f036ee4de9dbc3edca72d4b201d7d162c627273bcd60e30b6b22a5faa337d10e5534dd054d05d6caf59767be"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3f6, 0x4, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x6}]}}, {{0x9, 0x5, 0xb, 0x12, 0x10, 0xf6, 0xd, 0x8, [@generic={0x91, 0x31, "d4db16bc9ebc34c8bc37c2c09b2c8519dee0facbb3ba8fcef59f31102a4691fcaefd0b210a5b5ec27f4d59a9892ceac742819e318a9f96331df9b4805309ea7f0a203629f6039a88364d753aff357b8a1d2c69fb7cc9b35fd2359b0a614dce3adaf3e856d06f33e22b40e4004e6b765d4c27b7f01eda3e1d67f052983ed5d4f754c05c287b8cf8032c8ad283b90f14"}, @generic={0x35, 0x24, "7bc915213fb585473cf6358d084fd81ffce9d340070b94667292ee6473736b279d41361358351fc282465a1bbfc212d6849d5f"}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x310, 0xaa, 0xc4, 0x8, 0x8, 0x1}, 0x10, &(0x7f0000000fc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2b, 0xff, 0xe2, 0x5, 0x2}]}, 0x1, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1407}}]})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000010c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x124, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3606}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "519b3e06df5c45d68ed2a026126c847b606605aeeebe6b6b6612b706bdb3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "eb045c0abcc3e6603c58ae5c7a9eea4da0513f8c6058900e2dff98588b428015"}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000080)
syz_usb_connect$cdc_ncm(0x6, 0xc2, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x2, 0x1, 0x9, 0xb0, 0x9d, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "eddb8ce8c8ce"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xca, 0x7, 0xc}, {0x6, 0x24, 0x1a, 0x401, 0x8}, [@country_functional={0xa, 0x24, 0x7, 0x9, 0x80, [0xf2d7, 0x43]}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x4, 0xe46}, @country_functional={0x6, 0x24, 0x7, 0xae, 0x9}, @mdlm_detail={0x36, 0x24, 0x13, 0xff, "3a705387cbaf5baed0fb0310b4be23d9aaff9287567c26181c407721437b8166c5ccf4ee02b9633bd3eb7e25c7f7689d0f4d"}]}, {{0x9, 0x5, 0x81, 0x3, 0x30, 0x80, 0x1, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x7, 0x8a}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x5, 0x81}}}}}}}]}}, &(0x7f0000001600)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x5, 0xd, 0x5, 0xff, 0x7a}, 0x5, &(0x7f0000001500)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x3010}}]})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r12, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x20000000)
mount(&(0x7f0000001740)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='ubifs\x00', 0x80060, &(0x7f0000001800)='NLBL_UNLBL\x00')
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001840), r13)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000001880)={{{@in=@dev, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000001980)=0xe8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a00)={<r15=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x57c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0xa4}}, 0x4008884)
syz_genetlink_get_family_id$nbd(&(0x7f0000001b80), r9)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-writev
detailed listing:
executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/sockcreate\x00')
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="e98833c1922df44ffc7118c48822be13226bf6a155f0", 0x16}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
single: successfully extracted reproducer
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "f3609217643c8b3c1e52be5a9b2e562cd219771b683b28a20ef65dc7bc362de0a9722a15ed34665460b072127f136f32b9466b37cf836915e8a3d9523797f8e4d3d841921996f2fd14638a8572dd597e5591facabd0c995d1101ffab29c9e00952ad904b8836d82027e5560da9358fc31d498caaaa08d5dbfd16b2c4a1097d522bcefe0d5a7c737ac66056427cadd7e98165fdf5307612e23e107ce5ddcc22b9ee99158dee783a9dce5f3f82145e7bcc4ead7a5935fd2553019af877d33e5ad99475ed6a572f3dbdd821033c2d39d74f3fe6cc00b921a3a5f4609cf8e742b582493529fcee40b2b06c865460bbeb6f6891dfe559e217bb81e90a430f0d5a6f324200705ccb33ce0bee66c1fd60e18c8ed58506270a274fe996acba0f969ff7b110dfe7f306117b91607f9c880309943aa99472523b8476aa96f70340a04e0c3eeaae0f4b72946c982451fe3ad5ba5aaec35cd33b4644fcdab17f711d2a7c4f4a536f61fee2ba23f2e6900b34ce828881e14287cd96142e12936d65545b0424cad838453335cfd964209db29c8dd1c854c009fcde718d0c675ee86b1a597e8be8dce70c351396e48296caad5a17521c36e815d80c3c9fb60cfb6883c385a4e5301dca6e4fc4963bd6c6c40ffd248aadc7b1aac4edcf497251880106e89a18826a4687037c4794d8a7c73f6b5f218ebe2d6380095722825ed54254f932071e1257c91644cb82d0d6fb75b5f22090a38c96b99176f07c8cac611217249aba310c125ff840d0893c06ce328fcc0ef9ff6ebbc8e8396d4da4e430bbb454bbd35fa45ec2e09a66d514fa6b1ef03147f7ff4c2413a0e705e6f33310ad7fbc7a1726bd4d0e55733877d1801b2c70da0c4b80a82263ca8bc9390b5d31e94357c86afc6232f40c587502fc698ec20580e567cb36de10447014b79ee4c108faf0ea3486b69c2d019c1674648a20cae96dddf7b3fce17ad6b1c941adf4f5849576d623f85b6fe37961604315c0ddf151752cf81468037aa9751958997239ec7888b107a1dcd995b0b71f6942c438b1de438295720104d0437d33f25a7716b74424482b4348adc6780df8cf5c1f2c3482d60d9082eb6005437079c8a823d8966d2dc55feb7d210ba7fcce20b94a8583155452d391804cf92bf8faf22ce2fa2fcf88b450af81b7f1f2e528aeff5450b70f1510a642c7353ea8397d7d9096e47661ff3fa266328e2584fcb238b4fe21766e7d1d5ba4b493d3157d7e5fc6bb16c8e77f71ac4232b9014bbe91dbb59cbeb186cc5bd2ff360bc7675e93f979a7ff86c5452034730a208c208fe2a9243709130634c6a48e3479f8003ce25a713e3ba03b06985a47fd5050dbd4948464a0db8690c94459ac7a3db16b46f7757127544a57a5d1311ddf403cbfddabe831fd92d69f151682cff69ce2928e29ac75aa23211df99d00215bdd"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0x0, 0x0, 0xec, &(0x7f0000000180)={0x5, 0xf, 0xec, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0xd0, 0x10, 0x2, "93793aac2174f937545ebee341d57feff79c01cd120a7ce12b5e49b1a5c2a497ba06fb5ad08afa9cd7eecafd5ad079d23e9971b1ca9c01afe7513cc523619f4320841813cba7a6a674958e9bde66670305516599116572c72e5a73d970b2e99f70a62e92add0d5ad164e0ded0024c27c424654b6cc7bd5f80cc45936cad9981bcc72297ac6abaf185895d1f34bf5546bb5cfe425502e2760a29fcee6501696ad138ff52e70f7d3d93168a95786d3531d8e8f608532892f891ae6de1382de18f3656a4d3852e0697c53999bc5c9"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "1026d1e92220e9d334b8b4ee99c1569d92ae5a2fd7ab4d6cb993ce526ef7a0e29283770230500e98d5d6"}}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "f3609217643c8b3c1e52be5a9b2e562cd219771b683b28a20ef65dc7bc362de0a9722a15ed34665460b072127f136f32b9466b37cf836915e8a3d9523797f8e4d3d841921996f2fd14638a8572dd597e5591facabd0c995d1101ffab29c9e00952ad904b8836d82027e5560da9358fc31d498caaaa08d5dbfd16b2c4a1097d522bcefe0d5a7c737ac66056427cadd7e98165fdf5307612e23e107ce5ddcc22b9ee99158dee783a9dce5f3f82145e7bcc4ead7a5935fd2553019af877d33e5ad99475ed6a572f3dbdd821033c2d39d74f3fe6cc00b921a3a5f4609cf8e742b582493529fcee40b2b06c865460bbeb6f6891dfe559e217bb81e90a430f0d5a6f324200705ccb33ce0bee66c1fd60e18c8ed58506270a274fe996acba0f969ff7b110dfe7f306117b91607f9c880309943aa99472523b8476aa96f70340a04e0c3eeaae0f4b72946c982451fe3ad5ba5aaec35cd33b4644fcdab17f711d2a7c4f4a536f61fee2ba23f2e6900b34ce828881e14287cd96142e12936d65545b0424cad838453335cfd964209db29c8dd1c854c009fcde718d0c675ee86b1a597e8be8dce70c351396e48296caad5a17521c36e815d80c3c9fb60cfb6883c385a4e5301dca6e4fc4963bd6c6c40ffd248aadc7b1aac4edcf497251880106e89a18826a4687037c4794d8a7c73f6b5f218ebe2d6380095722825ed54254f932071e1257c91644cb82d0d6fb75b5f22090a38c96b99176f07c8cac611217249aba310c125ff840d0893c06ce328fcc0ef9ff6ebbc8e8396d4da4e430bbb454bbd35fa45ec2e09a66d514fa6b1ef03147f7ff4c2413a0e705e6f33310ad7fbc7a1726bd4d0e55733877d1801b2c70da0c4b80a82263ca8bc9390b5d31e94357c86afc6232f40c587502fc698ec20580e567cb36de10447014b79ee4c108faf0ea3486b69c2d019c1674648a20cae96dddf7b3fce17ad6b1c941adf4f5849576d623f85b6fe37961604315c0ddf151752cf81468037aa9751958997239ec7888b107a1dcd995b0b71f6942c438b1de438295720104d0437d33f25a7716b74424482b4348adc6780df8cf5c1f2c3482d60d9082eb6005437079c8a823d8966d2dc55feb7d210ba7fcce20b94a8583155452d391804cf92bf8faf22ce2fa2fcf88b450af81b7f1f2e528aeff5450b70f1510a642c7353ea8397d7d9096e47661ff3fa266328e2584fcb238b4fe21766e7d1d5ba4b493d3157d7e5fc6bb16c8e77f71ac4232b9014bbe91dbb59cbeb186cc5bd2ff360bc7675e93f979a7ff86c5452034730a208c208fe2a9243709130634c6a48e3479f8003ce25a713e3ba03b06985a47fd5050dbd4948464a0db8690c94459ac7a3db16b46f7757127544a57a5d1311ddf403cbfddabe831fd92d69f151682cff69ce2928e29ac75aa23211df99d00215bdd"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x84, &(0x7f00000002c0)=@string={0x84, 0x3, "3cbe266555f2a3746ae320625e23fec75a1d8e2bebe4d8ec1237141bdc80eed8233652981a532636baf0acc2fbe51a9355153c4a3acad1f3ca6cb02e1f479aee4e06a5fb6bc5b6acc4ae12164fdfe31a630b85d60a2848fe9934d08050fe0ba70ff4e1344d15cfbc9ce21c34fa4e6490222ff45267cdaea3f40aaea770a1c3975387"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "f3609217643c8b3c1e52be5a9b2e562cd219771b683b28a20ef65dc7bc362de0a9722a15ed34665460b072127f136f32b9466b37cf836915e8a3d9523797f8e4d3d841921996f2fd14638a8572dd597e5591facabd0c995d1101ffab29c9e00952ad904b8836d82027e5560da9358fc31d498caaaa08d5dbfd16b2c4a1097d522bcefe0d5a7c737ac66056427cadd7e98165fdf5307612e23e107ce5ddcc22b9ee99158dee783a9dce5f3f82145e7bcc4ead7a5935fd2553019af877d33e5ad99475ed6a572f3dbdd821033c2d39d74f3fe6cc00b921a3a5f4609cf8e742b582493529fcee40b2b06c865460bbeb6f6891dfe559e217bb81e90a430f0d5a6f324200705ccb33ce0bee66c1fd60e18c8ed58506270a274fe996acba0f969ff7b110dfe7f306117b91607f9c880309943aa99472523b8476aa96f70340a04e0c3eeaae0f4b72946c982451fe3ad5ba5aaec35cd33b4644fcdab17f711d2a7c4f4a536f61fee2ba23f2e6900b34ce828881e14287cd96142e12936d65545b0424cad838453335cfd964209db29c8dd1c854c009fcde718d0c675ee86b1a597e8be8dce70c351396e48296caad5a17521c36e815d80c3c9fb60cfb6883c385a4e5301dca6e4fc4963bd6c6c40ffd248aadc7b1aac4edcf497251880106e89a18826a4687037c4794d8a7c73f6b5f218ebe2d6380095722825ed54254f932071e1257c91644cb82d0d6fb75b5f22090a38c96b99176f07c8cac611217249aba310c125ff840d0893c06ce328fcc0ef9ff6ebbc8e8396d4da4e430bbb454bbd35fa45ec2e09a66d514fa6b1ef03147f7ff4c2413a0e705e6f33310ad7fbc7a1726bd4d0e55733877d1801b2c70da0c4b80a82263ca8bc9390b5d31e94357c86afc6232f40c587502fc698ec20580e567cb36de10447014b79ee4c108faf0ea3486b69c2d019c1674648a20cae96dddf7b3fce17ad6b1c941adf4f5849576d623f85b6fe37961604315c0ddf151752cf81468037aa9751958997239ec7888b107a1dcd995b0b71f6942c438b1de438295720104d0437d33f25a7716b74424482b4348adc6780df8cf5c1f2c3482d60d9082eb6005437079c8a823d8966d2dc55feb7d210ba7fcce20b94a8583155452d391804cf92bf8faf22ce2fa2fcf88b450af81b7f1f2e528aeff5450b70f1510a642c7353ea8397d7d9096e47661ff3fa266328e2584fcb238b4fe21766e7d1d5ba4b493d3157d7e5fc6bb16c8e77f71ac4232b9014bbe91dbb59cbeb186cc5bd2ff360bc7675e93f979a7ff86c5452034730a208c208fe2a9243709130634c6a48e3479f8003ce25a713e3ba03b06985a47fd5050dbd4948464a0db8690c94459ac7a3db16b46f7757127544a57a5d1311ddf403cbfddabe831fd92d69f151682cff69ce2928e29ac75aa23211df99d00215bdd"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x0, 0x0}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "f3609217643c8b3c1e52be5a9b2e562cd219771b683b28a20ef65dc7bc362de0a9722a15ed34665460b072127f136f32b9466b37cf836915e8a3d9523797f8e4d3d841921996f2fd14638a8572dd597e5591facabd0c995d1101ffab29c9e00952ad904b8836d82027e5560da9358fc31d498caaaa08d5dbfd16b2c4a1097d522bcefe0d5a7c737ac66056427cadd7e98165fdf5307612e23e107ce5ddcc22b9ee99158dee783a9dce5f3f82145e7bcc4ead7a5935fd2553019af877d33e5ad99475ed6a572f3dbdd821033c2d39d74f3fe6cc00b921a3a5f4609cf8e742b582493529fcee40b2b06c865460bbeb6f6891dfe559e217bb81e90a430f0d5a6f324200705ccb33ce0bee66c1fd60e18c8ed58506270a274fe996acba0f969ff7b110dfe7f306117b91607f9c880309943aa99472523b8476aa96f70340a04e0c3eeaae0f4b72946c982451fe3ad5ba5aaec35cd33b4644fcdab17f711d2a7c4f4a536f61fee2ba23f2e6900b34ce828881e14287cd96142e12936d65545b0424cad838453335cfd964209db29c8dd1c854c009fcde718d0c675ee86b1a597e8be8dce70c351396e48296caad5a17521c36e815d80c3c9fb60cfb6883c385a4e5301dca6e4fc4963bd6c6c40ffd248aadc7b1aac4edcf497251880106e89a18826a4687037c4794d8a7c73f6b5f218ebe2d6380095722825ed54254f932071e1257c91644cb82d0d6fb75b5f22090a38c96b99176f07c8cac611217249aba310c125ff840d0893c06ce328fcc0ef9ff6ebbc8e8396d4da4e430bbb454bbd35fa45ec2e09a66d514fa6b1ef03147f7ff4c2413a0e705e6f33310ad7fbc7a1726bd4d0e55733877d1801b2c70da0c4b80a82263ca8bc9390b5d31e94357c86afc6232f40c587502fc698ec20580e567cb36de10447014b79ee4c108faf0ea3486b69c2d019c1674648a20cae96dddf7b3fce17ad6b1c941adf4f5849576d623f85b6fe37961604315c0ddf151752cf81468037aa9751958997239ec7888b107a1dcd995b0b71f6942c438b1de438295720104d0437d33f25a7716b74424482b4348adc6780df8cf5c1f2c3482d60d9082eb6005437079c8a823d8966d2dc55feb7d210ba7fcce20b94a8583155452d391804cf92bf8faf22ce2fa2fcf88b450af81b7f1f2e528aeff5450b70f1510a642c7353ea8397d7d9096e47661ff3fa266328e2584fcb238b4fe21766e7d1d5ba4b493d3157d7e5fc6bb16c8e77f71ac4232b9014bbe91dbb59cbeb186cc5bd2ff360bc7675e93f979a7ff86c5452034730a208c208fe2a9243709130634c6a48e3479f8003ce25a713e3ba03b06985a47fd5050dbd4948464a0db8690c94459ac7a3db16b46f7757127544a57a5d1311ddf403cbfddabe831fd92d69f151682cff69ce2928e29ac75aa23211df99d00215bdd"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

program did not crash
testing program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000100))

program did not crash
extracting C reproducer
testing compiled C program (duration=46.343771307s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
simplifying C reproducer
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program did not crash
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program did not crash
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program did not crash
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program did not crash
testing compiled C program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
testing program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
validation run: crashed=false
testing program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
validation run: crashed=false
testing program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program did not crash
validation run: crashed=false
testing program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
validation run: crashed=true
testing program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
validation run: crashed=true
testing program (duration=46.343771307s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$sierra_net-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0xfffffffffffffffc, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x64, 0x9, 0x20, 0xfc}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7f, 0x7, 0x4, 0xf7}, @generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

program crashed: UBSAN: array-index-out-of-bounds in aiptek_irq
validation run: crashed=true
reproducing took 40m42.983106681s
repro crashed as (corrupted=false):
================================================================================
UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
index 23191 is out of range for type 'const int[34]'
CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_out_of_bounds+0xdf/0xf0 lib/ubsan.c:282
 aiptek_irq+0x2045/0x29b0 drivers/input/tablet/aiptek.c:741
 __usb_hcd_giveback_urb+0x360/0x520 drivers/usb/core/hcd.c:1675
 usb_hcd_giveback_urb+0x11f/0x3e0 drivers/usb/core/hcd.c:1758
 dummy_timer+0xa25/0x3270 drivers/usb/gadget/udc/dummy_hcd.c:2004
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x398/0x890 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x19b/0x260 kernel/time/hrtimer.c:1766
 handle_softirqs+0x1d7/0x600 kernel/softirq.c:642
 __do_softirq kernel/softirq.c:680 [inline]
 invoke_softirq kernel/softirq.c:497 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:729
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:741
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa9/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:742
Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: b2ce7d2e1d703400
RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900
RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
 arch_cpu_idle+0x1c/0x20 arch/x86/kernel/process.c:733
 default_idle_call+0x71/0x1d0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x354/0x640 kernel/sched/idle.c:323
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:422
 rest_init+0x10a/0x130 init/main.c:744
 arch_call_rest_init+0xe/0x10 init/main.c:904
 start_kernel+0x483/0x4f1 init/main.c:1275
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:555
 x86_64_start_kernel+0x7c/0x81 arch/x86/kernel/head64.c:536
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>
================================================================================
==================================================================
BUG: KASAN: global-out-of-bounds in aiptek_irq+0x2063/0x29b0 drivers/input/tablet/aiptek.c:741
Read of size 4 at addr ffffffff85e7bf5c by task swapper/0/0

CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 print_address_description+0x71/0x200 mm/kasan/report.c:316
 print_report+0x4a/0x60 mm/kasan/report.c:420
 kasan_report+0x122/0x150 mm/kasan/report.c:524
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report_generic.c:350
 aiptek_irq+0x2063/0x29b0 drivers/input/tablet/aiptek.c:741
 __usb_hcd_giveback_urb+0x360/0x520 drivers/usb/core/hcd.c:1675
 usb_hcd_giveback_urb+0x11f/0x3e0 drivers/usb/core/hcd.c:1758
 dummy_timer+0xa25/0x3270 drivers/usb/gadget/udc/dummy_hcd.c:2004
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x398/0x890 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x19b/0x260 kernel/time/hrtimer.c:1766
 handle_softirqs+0x1d7/0x600 kernel/softirq.c:642
 __do_softirq kernel/softirq.c:680 [inline]
 invoke_softirq kernel/softirq.c:497 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:729
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:741
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa9/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:742
Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: b2ce7d2e1d703400
RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900
RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
 arch_cpu_idle+0x1c/0x20 arch/x86/kernel/process.c:733
 default_idle_call+0x71/0x1d0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x354/0x640 kernel/sched/idle.c:323
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:422
 rest_init+0x10a/0x130 init/main.c:744
 arch_call_rest_init+0xe/0x10 init/main.c:904
 start_kernel+0x483/0x4f1 init/main.c:1275
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:555
 x86_64_start_kernel+0x7c/0x81 arch/x86/kernel/head64.c:536
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>

The buggy address belongs to the variable:
 .str.32+0x1c/0x20

The buggy address belongs to the physical page:
page:ffffea0000179ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e7b
flags: 0x1000(reserved|zone=0)
raw: 0000000000001000 ffffea0000179ec8 ffffea0000179ec8 0000000000000000
raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner info is not present (never set?)

Memory state around the buggy address:
 ffffffff85e7be00: 00 00 00 07 f9 f9 f9 f9 00 00 00 05 f9 f9 f9 f9
 ffffffff85e7be80: 00 04 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
>ffffffff85e7bf00: 05 f9 f9 f9 06 f9 f9 f9 00 02 f9 f9 04 f9 f9 f9
                                                    ^
 ffffffff85e7bf80: 06 f9 f9 f9 00 00 00 00 00 00 05 f9 f9 f9 f9 f9
 ffffffff85e7c000: 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 00 00 00 00
==================================================================
================================================================================
UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
index 23192 is out of range for type 'const int[34]'
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B              syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_out_of_bounds+0xdf/0xf0 lib/ubsan.c:282
 aiptek_irq+0x1f14/0x29b0 drivers/input/tablet/aiptek.c:763
 __usb_hcd_giveback_urb+0x360/0x520 drivers/usb/core/hcd.c:1675
 usb_hcd_giveback_urb+0x11f/0x3e0 drivers/usb/core/hcd.c:1758
 dummy_timer+0xa25/0x3270 drivers/usb/gadget/udc/dummy_hcd.c:2004
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x398/0x890 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x19b/0x260 kernel/time/hrtimer.c:1766
 handle_softirqs+0x1d7/0x600 kernel/softirq.c:642
 __do_softirq kernel/softirq.c:680 [inline]
 invoke_softirq kernel/softirq.c:497 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:729
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:741
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa9/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:742
Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: b2ce7d2e1d703400
RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900
RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
 arch_cpu_idle+0x1c/0x20 arch/x86/kernel/process.c:733
 default_idle_call+0x71/0x1d0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x354/0x640 kernel/sched/idle.c:323
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:422
 rest_init+0x10a/0x130 init/main.c:744
 arch_call_rest_init+0xe/0x10 init/main.c:904
 start_kernel+0x483/0x4f1 init/main.c:1275
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:555
 x86_64_start_kernel+0x7c/0x81 arch/x86/kernel/head64.c:536
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>
================================================================================
aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
----------------
Code disassembly (best guess):
   0:	cc                   	int3
   1:	00 00                	add    %al,(%rax)
   3:	cc                   	int3
   4:	cc                   	int3
   5:	00 00                	add    %al,(%rax)
   7:	cc                   	int3
   8:	cc                   	int3
   9:	00 00                	add    %al,(%rax)
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	b8 0c 67 40 a5       	mov    $0xa540670c,%eax
  1b:	55                   	push   %rbp
  1c:	48 89 e5             	mov    %rsp,%rbp
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d 53 5b 65 00 	verw   0x655b53(%rip)        # 0x655b7b
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	5d                   	pop    %rbp <-- trapping instruction
  2b:	c3                   	ret
  2c:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  33:	00 00 00
  36:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

final repro crashed as (corrupted=false):
================================================================================
UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
index 23191 is out of range for type 'const int[34]'
CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_out_of_bounds+0xdf/0xf0 lib/ubsan.c:282
 aiptek_irq+0x2045/0x29b0 drivers/input/tablet/aiptek.c:741
 __usb_hcd_giveback_urb+0x360/0x520 drivers/usb/core/hcd.c:1675
 usb_hcd_giveback_urb+0x11f/0x3e0 drivers/usb/core/hcd.c:1758
 dummy_timer+0xa25/0x3270 drivers/usb/gadget/udc/dummy_hcd.c:2004
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x398/0x890 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x19b/0x260 kernel/time/hrtimer.c:1766
 handle_softirqs+0x1d7/0x600 kernel/softirq.c:642
 __do_softirq kernel/softirq.c:680 [inline]
 invoke_softirq kernel/softirq.c:497 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:729
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:741
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa9/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:742
Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: b2ce7d2e1d703400
RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900
RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
 arch_cpu_idle+0x1c/0x20 arch/x86/kernel/process.c:733
 default_idle_call+0x71/0x1d0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x354/0x640 kernel/sched/idle.c:323
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:422
 rest_init+0x10a/0x130 init/main.c:744
 arch_call_rest_init+0xe/0x10 init/main.c:904
 start_kernel+0x483/0x4f1 init/main.c:1275
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:555
 x86_64_start_kernel+0x7c/0x81 arch/x86/kernel/head64.c:536
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>
================================================================================
==================================================================
BUG: KASAN: global-out-of-bounds in aiptek_irq+0x2063/0x29b0 drivers/input/tablet/aiptek.c:741
Read of size 4 at addr ffffffff85e7bf5c by task swapper/0/0

CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 print_address_description+0x71/0x200 mm/kasan/report.c:316
 print_report+0x4a/0x60 mm/kasan/report.c:420
 kasan_report+0x122/0x150 mm/kasan/report.c:524
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report_generic.c:350
 aiptek_irq+0x2063/0x29b0 drivers/input/tablet/aiptek.c:741
 __usb_hcd_giveback_urb+0x360/0x520 drivers/usb/core/hcd.c:1675
 usb_hcd_giveback_urb+0x11f/0x3e0 drivers/usb/core/hcd.c:1758
 dummy_timer+0xa25/0x3270 drivers/usb/gadget/udc/dummy_hcd.c:2004
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x398/0x890 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x19b/0x260 kernel/time/hrtimer.c:1766
 handle_softirqs+0x1d7/0x600 kernel/softirq.c:642
 __do_softirq kernel/softirq.c:680 [inline]
 invoke_softirq kernel/softirq.c:497 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:729
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:741
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa9/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:742
Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: b2ce7d2e1d703400
RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900
RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
 arch_cpu_idle+0x1c/0x20 arch/x86/kernel/process.c:733
 default_idle_call+0x71/0x1d0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x354/0x640 kernel/sched/idle.c:323
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:422
 rest_init+0x10a/0x130 init/main.c:744
 arch_call_rest_init+0xe/0x10 init/main.c:904
 start_kernel+0x483/0x4f1 init/main.c:1275
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:555
 x86_64_start_kernel+0x7c/0x81 arch/x86/kernel/head64.c:536
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>

The buggy address belongs to the variable:
 .str.32+0x1c/0x20

The buggy address belongs to the physical page:
page:ffffea0000179ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e7b
flags: 0x1000(reserved|zone=0)
raw: 0000000000001000 ffffea0000179ec8 ffffea0000179ec8 0000000000000000
raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner info is not present (never set?)

Memory state around the buggy address:
 ffffffff85e7be00: 00 00 00 07 f9 f9 f9 f9 00 00 00 05 f9 f9 f9 f9
 ffffffff85e7be80: 00 04 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
>ffffffff85e7bf00: 05 f9 f9 f9 06 f9 f9 f9 00 02 f9 f9 04 f9 f9 f9
                                                    ^
 ffffffff85e7bf80: 06 f9 f9 f9 00 00 00 00 00 00 05 f9 f9 f9 f9 f9
 ffffffff85e7c000: 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 00 00 00 00
==================================================================
================================================================================
UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
index 23192 is out of range for type 'const int[34]'
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B              syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_out_of_bounds+0xdf/0xf0 lib/ubsan.c:282
 aiptek_irq+0x1f14/0x29b0 drivers/input/tablet/aiptek.c:763
 __usb_hcd_giveback_urb+0x360/0x520 drivers/usb/core/hcd.c:1675
 usb_hcd_giveback_urb+0x11f/0x3e0 drivers/usb/core/hcd.c:1758
 dummy_timer+0xa25/0x3270 drivers/usb/gadget/udc/dummy_hcd.c:2004
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x398/0x890 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x19b/0x260 kernel/time/hrtimer.c:1766
 handle_softirqs+0x1d7/0x600 kernel/softirq.c:642
 __do_softirq kernel/softirq.c:680 [inline]
 invoke_softirq kernel/softirq.c:497 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:729
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:741
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa9/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:742
Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: b2ce7d2e1d703400
RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900
RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
 arch_cpu_idle+0x1c/0x20 arch/x86/kernel/process.c:733
 default_idle_call+0x71/0x1d0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x354/0x640 kernel/sched/idle.c:323
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:422
 rest_init+0x10a/0x130 init/main.c:744
 arch_call_rest_init+0xe/0x10 init/main.c:904
 start_kernel+0x483/0x4f1 init/main.c:1275
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:555
 x86_64_start_kernel+0x7c/0x81 arch/x86/kernel/head64.c:536
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>
================================================================================
aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
----------------
Code disassembly (best guess):
   0:	cc                   	int3
   1:	00 00                	add    %al,(%rax)
   3:	cc                   	int3
   4:	cc                   	int3
   5:	00 00                	add    %al,(%rax)
   7:	cc                   	int3
   8:	cc                   	int3
   9:	00 00                	add    %al,(%rax)
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	b8 0c 67 40 a5       	mov    $0xa540670c,%eax
  1b:	55                   	push   %rbp
  1c:	48 89 e5             	mov    %rsp,%rbp
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d 53 5b 65 00 	verw   0x655b53(%rip)        # 0x655b7b
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	5d                   	pop    %rbp <-- trapping instruction
  2b:	c3                   	ret
  2c:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  33:	00 00 00
  36:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop