Extracting prog: 2m32.420315391s
Minimizing prog: 15m15.825804423s
Simplifying prog options: 0s
Extracting C: 1m19.975404669s
Simplifying C: 9m38.614245926s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program crashed: WARNING in usbnet_status_start
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xf, 0x1f, 0xe7}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0x2, {0x2, 0x4}}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x5, "dd75c731", "f95b80f1"}}, 0x0}, 0x0)

program did not crash
testing program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: WARNING in usbnet_status_start
extracting C reproducer
testing compiled C program (duration=45.359112759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
simplifying C reproducer
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing compiled C program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
program crashed: WARNING in usbnet_status_start
testing program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: WARNING in usbnet_status_start
validation run: crashed=true
testing program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: WARNING in usbnet_status_start
validation run: crashed=true
testing program (duration=45.359112759s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0xbf, {0xbf, 0x4, "d2faa16f52742adc21ca847edb32263906b9f39427d8407563fdce1915217c438159e75a829cce90aa45cc31fa0c6071918a16b9db49c1fff1b905f00408d493ae1d219a376ebb5c5ada6143eeb3056e4eafb0bb933073466f54f52f5aeb079d59b1b9a560573edb27baeb1a842dbf5447fb3df78e2b714dd1180820622fc2f90d932a0cf761c5f6ecc232c91ab5b8ed43199f25a12fbd2248470aea417224cce6ffff0bb5365f227fc6da508057f4af6557e7aa777239a4c1acbfe10e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: WARNING in usbnet_status_start
validation run: crashed=true
reproducing took 33m13.232533342s
repro crashed as (corrupted=false):
sierra_net 1-1:0.11 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:0b
------------[ cut here ]------------
WARNING: drivers/net/usb/usbnet.c:266 at usbnet_status_start+0x108/0x1d0 drivers/net/usb/usbnet.c:266, CPU#0: kworker/0:0/9
Modules linked in:
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: usb_hub_wq hub_event
RIP: 0010:usbnet_status_start+0x108/0x1d0 drivers/net/usb/usbnet.c:266
Code: c6 66 90 e8 6a 99 a9 fa 48 8b 7c 24 08 e8 90 57 6b 04 44 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4a d2 6c 04 cc 90 <0f> 0b 90 41 80 3c 2c 00 74 08 4c 89 f7 e8 96 4e 0e fb 49 83 3e 00
RSP: 0018:ffffc900000e6da0 EFLAGS: 00010246
RAX: ffffffff87166c37 RBX: ffff88801a908d80 RCX: ffff88801d2b0000
RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff88801a908d80
RBP: dffffc0000000000 R08: ffff88801a9080af R09: 1ffff11003521015
R10: dffffc0000000000 R11: ffffed1003521016 R12: 1ffff1100352121e
R13: 0000000000000000 R14: ffff88801a9090f0 R15: 0000000000000cc0
FS:  0000000000000000(0000) GS:ffff888125798000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f75fe571d60 CR3: 0000000024806000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 sierra_net_probe+0x6a/0xa0 drivers/net/usb/sierra_net.c:929
 usb_probe_interface+0x637/0xbf0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26a/0x9e0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x2f0 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x430 drivers/base/dd.c:831
 __device_attach_driver+0x2ce/0x530 drivers/base/dd.c:959
 bus_for_each_drv+0x251/0x2e0 drivers/base/bus.c:462
 __device_attach+0x2b8/0x400 drivers/base/dd.c:1031
 bus_probe_device+0x185/0x260 drivers/base/bus.c:537
 device_add+0x7b6/0xb50 drivers/base/core.c:3689
 usb_set_configuration+0x1a87/0x20e0 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
 usb_probe_device+0x1c1/0x390 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26a/0x9e0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x2f0 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x430 drivers/base/dd.c:831
 __device_attach_driver+0x2ce/0x530 drivers/base/dd.c:959
 bus_for_each_drv+0x251/0x2e0 drivers/base/bus.c:462
 __device_attach+0x2b8/0x400 drivers/base/dd.c:1031
 bus_probe_device+0x185/0x260 drivers/base/bus.c:537
 device_add+0x7b6/0xb50 drivers/base/core.c:3689
 usb_new_device+0xa39/0x16f0 drivers/usb/core/hub.c:2694
 hub_port_connect drivers/usb/core/hub.c:5566 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5706 [inline]
 port_event drivers/usb/core/hub.c:5866 [inline]
 hub_event+0x2941/0x4a00 drivers/usb/core/hub.c:5948
 process_one_work kernel/workqueue.c:3239 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
sierra_net 1-1:0.11 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:0b
------------[ cut here ]------------
WARNING: drivers/net/usb/usbnet.c:266 at usbnet_status_start+0x108/0x1d0 drivers/net/usb/usbnet.c:266, CPU#0: kworker/0:0/9
Modules linked in:
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: usb_hub_wq hub_event
RIP: 0010:usbnet_status_start+0x108/0x1d0 drivers/net/usb/usbnet.c:266
Code: c6 66 90 e8 6a 99 a9 fa 48 8b 7c 24 08 e8 90 57 6b 04 44 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4a d2 6c 04 cc 90 <0f> 0b 90 41 80 3c 2c 00 74 08 4c 89 f7 e8 96 4e 0e fb 49 83 3e 00
RSP: 0018:ffffc900000e6da0 EFLAGS: 00010246
RAX: ffffffff87166c37 RBX: ffff88801a908d80 RCX: ffff88801d2b0000
RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff88801a908d80
RBP: dffffc0000000000 R08: ffff88801a9080af R09: 1ffff11003521015
R10: dffffc0000000000 R11: ffffed1003521016 R12: 1ffff1100352121e
R13: 0000000000000000 R14: ffff88801a9090f0 R15: 0000000000000cc0
FS:  0000000000000000(0000) GS:ffff888125798000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f75fe571d60 CR3: 0000000024806000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 sierra_net_probe+0x6a/0xa0 drivers/net/usb/sierra_net.c:929
 usb_probe_interface+0x637/0xbf0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26a/0x9e0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x2f0 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x430 drivers/base/dd.c:831
 __device_attach_driver+0x2ce/0x530 drivers/base/dd.c:959
 bus_for_each_drv+0x251/0x2e0 drivers/base/bus.c:462
 __device_attach+0x2b8/0x400 drivers/base/dd.c:1031
 bus_probe_device+0x185/0x260 drivers/base/bus.c:537
 device_add+0x7b6/0xb50 drivers/base/core.c:3689
 usb_set_configuration+0x1a87/0x20e0 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
 usb_probe_device+0x1c1/0x390 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26a/0x9e0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x2f0 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x430 drivers/base/dd.c:831
 __device_attach_driver+0x2ce/0x530 drivers/base/dd.c:959
 bus_for_each_drv+0x251/0x2e0 drivers/base/bus.c:462
 __device_attach+0x2b8/0x400 drivers/base/dd.c:1031
 bus_probe_device+0x185/0x260 drivers/base/bus.c:537
 device_add+0x7b6/0xb50 drivers/base/core.c:3689
 usb_new_device+0xa39/0x16f0 drivers/usb/core/hub.c:2694
 hub_port_connect drivers/usb/core/hub.c:5566 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5706 [inline]
 port_event drivers/usb/core/hub.c:5866 [inline]
 hub_event+0x2941/0x4a00 drivers/usb/core/hub.c:5948
 process_one_work kernel/workqueue.c:3239 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>