From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out162-62-57-87.mail.qq.com (out162-62-57-87.mail.qq.com [162.62.57.87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0787D3624C6 for ; Mon, 9 Mar 2026 06:52:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=162.62.57.87 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773039150; cv=none; b=XsUauGCcUOxrYohlysLO18sRYpMfxEpXJ7IWeMHERh+Y3LMV+U/XXCipYl414pOcg1sJcrwnSBRgRybDjkBSa1DSRuHGdxwEfzBvKx9DSGDeEnlkvbYl2SZIb4mQWOqIyxyjJZdUue5coHGAeXgJuWt23ZkMtIYdVutdWmauaMY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773039150; c=relaxed/simple; bh=95cp54A+EVm7ZGZmfZnfvS+A0FUPPnFyXmGyASWZYFQ=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=ABZesHhNYHVl/F7yTCZUcT3wBrqwoYLHEQ4oYRGpPk8TcBPSUczDR5pyojc2KveOVHLwLtq58ygGTUdbgwkq+zd9E6BxoBeA5CxJa5OegMlC7ryzU5afR0sO7+xKddrg8+9Pao0WtJWyEcle39RtRzCqUdXgd6+UYMiAhZdaHfw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=lKFC23rC; arc=none smtp.client-ip=162.62.57.87 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="lKFC23rC" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1773039137; bh=DsT42IZXeEVeYMN2m6w/BsbtBOQH1JhqQjsVILO0gpQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=lKFC23rCsOFNCXXdIuIgEhxKJOEojcYwgk4uwVdTNY+yGTQkyivurudsKJk/3dAw8 Fm8/mLhROdMGeq1AjPjNB3gg/N/VrrhZgLvCqts9oi+TmrBxfkAceJXJzhHOEubo6Y iaI9iWInIixexu2gpFtJl1nFYdrsV+6WhJSO03FY= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszc41-0.qq.com (NewEsmtp) with SMTP id D0E1D222; Mon, 09 Mar 2026 14:52:14 +0800 X-QQ-mid: xmsmtpt1773039134tsoo1bhe2 Message-ID: X-QQ-XMAILINFO: NPD+Ohwcq54zz4ZKYSdZq3cZrm0ZHdd0pupAxi7GrtWQp1dtB5BdQ0n/kq+3mP NFAXOoDdxPJ23aApl2/vMcDkkxLrLgrAJkvDX44pPvfLic0CiOgf+hishNybSnKrPqPd23IeHM/z YTneOuiGhdJy+8l+KUfsy+ohzUXZf4GsHeWeCrLtUVy1iTUc37CQPjWoHlTQQASPLMKJzW2VYhbn ZZV1o9gSY3Nl835j/ePLeih+b2EeTcSQ1geXObeNWBFDM4/RO/m6UNT0PhbsDYWRtTcG6wXFZnTe v9zg4v+WrsM1Rgw0xHiLNQaV1GUCWzkqqOq6DS7q4j2THvgs+3uHw6kvhT+6KGgFAZTVOj7mgYQK uaV/j4Ay0fGrl5Pr4e+VlpD7rH0VbHlC2VEzqOUrUHBMcx+nlOgdePn45EyTEOY9u//1eOmJfz8W IgoFcGN0FQlnp3ZB87KaVoUynF0Yx7wpguc4DqA0Yuf9SY3PWwG68H/g8WyZAGUBEg8gu/JFadz1 3Nrp3rdojmvUXmSwqkBnfx5vbJAHzGGFl0hac83MemYX95U1BQ1xVyB+dCkfox30Q+OGe1GFlLlF DWJO/U0+ohJdIGyMk1YgHti5V/q97yuoYDK2aGw+yLALArbmpUxiKSWZRp1B03UTaTzAumkguXj1 L+7qoUSUIyF8IxYCVNWDfaP8zXTDx6ssIg8PZfCVs+RtyZHGpv4reLVGnAeV7VOhMhA2bfIOXn3W 8k1h7ojVyXSEDW/0t7pN674LYN40neuPvDsCeeD4J18DMhufigRWXkcgtFuORnsqriWVWoWTyzIb eHfqqzUNhNTD2wyqPiClR3xv8fc3MQiBSDkOkeuYj3CaJaQSMKS9+qbhHvYNkBGsKcAQGEVk4UrE wg2ErjXB8E7rS040VO4laLNjWZ6HkXRuG3mdtwPGLz71O5YqAGx5OXKOXdY2ZADSYMCl0SDXFKvD xAxUKTkoWAYfdhdk8rgSvN4lYYJTkHg8cdBC+2qg1ILrEcSqsNqA== X-QQ-XMRINFO: OWPUhxQsoeAVwkVaQIEGSKwwgKCxK/fD5g== From: Edward Adam Davis To: syzbot+ae893a8901067fde2741@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [sound?] general protection fault in snd_scarlett2_init Date: Mon, 9 Mar 2026 14:52:14 +0800 X-OQ-MSGID: <20260309065213.536776-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69acf72a.050a0220.310d8.0004.GAE@google.com> References: <69acf72a.050a0220.310d8.0004.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/sound/usb/mixer.c b/sound/usb/mixer.c index ac8c71ba9483..bd28caec3004 100644 --- a/sound/usb/mixer.c +++ b/sound/usb/mixer.c @@ -3563,8 +3563,12 @@ static int snd_usb_mixer_status_create(struct usb_mixer_interface *mixer) int buffer_length; unsigned int epnum; + epnum = get_iface_desc(mixer->hostif)->bNumEndpoints; + if (epnum == 0) + return -EINVAL; + /* we need one interrupt input endpoint */ - if (get_iface_desc(mixer->hostif)->bNumEndpoints < 1) + if (epnum < 1) return 0; ep = get_endpoint(mixer->hostif, 0); if (!usb_endpoint_dir_in(ep) || !usb_endpoint_xfer_int(ep))