program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x101002, 0x0)
write(r0, &(0x7f0000000200)='+p', 0x2)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000006ec0)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000006f00)={0x84, &(0x7f0000006fc0)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$usbfs(&(0x7f0000007000), 0x10000001d, 0x8041)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000007040)=@usbdevfs_connect) (fail_nth: 18)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000007080)={0x1c, &(0x7f00000070c0)={0x40, 0xe}, 0x0, 0x0})
[ 77.901009][ T5296] Bluetooth: hci0: command tx timeout
[ 77.906647][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 77.906723][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 78.375024][ T5334] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 78.536525][ T5334] usb 5-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=1.00
[ 78.539356][ T5334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 78.591964][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 78.591976][ T5334] usb 5-1: Product: syz
[ 78.591984][ T5334] usb 5-1: Manufacturer: syz
[ 78.591993][ T5334] usb 5-1: SerialNumber: syz
[ 78.850009][ T5334] hackrf 5-1:1.0: usb_control_msg() failed -32 request 0e
[ 78.850020][ T5334] hackrf 5-1:1.0: Could not detect board
[ 78.850071][ T5334] hackrf 5-1:1.0: probe with driver hackrf failed with error -32
[ 79.276754][ T5338] hackrf 5-1:1.0: Board ID: 00
[ 79.276762][ T5338] hackrf 5-1:1.0: Firmware version:
[ 79.276801][ T5338] FAULT_INJECTION: forcing a failure.
[ 79.276801][ T5338] name failslab, interval 1, probability 0, space 0, times 1
[ 79.276830][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 79.276843][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.276851][ T5338] Call Trace:
[ 79.276856][ T5338]
[ 79.276875][ T5338] dump_stack_lvl+0xe8/0x150
[ 79.277037][ T5338] should_fail_ex+0x410/0x560
[ 79.277111][ T5338] should_failslab+0xa8/0x100
[ 79.277137][ T5338] __kvmalloc_node_noprof+0x171/0x820
[ 79.277148][ T5338] ? __driver_probe_device+0x1e8/0x360
[ 79.277222][ T5338] ? __device_attach_driver+0x270/0x410
[ 79.277234][ T5338] ? bus_for_each_drv+0x258/0x2f0
[ 79.277249][ T5338] ? __device_attach+0x2c4/0x450
[ 79.277256][ T5338] ? v4l2_ctrl_new+0xa5a/0x1820
[ 79.277308][ T5338] ? v4l2_ctrl_new+0xa5a/0x1820
[ 79.277322][ T5338] v4l2_ctrl_new+0xa5a/0x1820
[ 79.277337][ T5338] v4l2_ctrl_new_std+0x24e/0x300
[ 79.277353][ T5338] ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[ 79.277363][ T5338] ? trace_kmalloc+0x2a/0xf0
[ 79.277377][ T5338] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[ 79.277393][ T5338] ? __kvmalloc_node_noprof+0x52a/0x820
[ 79.277412][ T5338] ? media_request_object_init+0x8d/0xf0
[ 79.277426][ T5338] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[ 79.277445][ T5338] hackrf_probe+0x778/0x1360
[ 79.277472][ T5338] ? __pfx_hackrf_probe+0x10/0x10
[ 79.277488][ T5338] ? __pm_runtime_set_status+0xa96/0xd80
[ 79.277507][ T5338] usb_probe_interface+0x751/0xe00
[ 79.277541][ T5338] ? __pfx_usb_probe_interface+0x10/0x10
[ 79.277555][ T5338] ? kernfs_create_link+0x1cd/0x240
[ 79.277589][ T5338] ? sysfs_do_create_link_sd+0xe0/0x110
[ 79.277606][ T5338] ? driver_sysfs_add+0x1fe/0x210
[ 79.277619][ T5338] ? __pfx_usb_probe_interface+0x10/0x10
[ 79.277635][ T5338] really_probe+0x254/0xae0
[ 79.277650][ T5338] __driver_probe_device+0x1e8/0x360
[ 79.277659][ T5338] driver_probe_device+0x4f/0x240
[ 79.277668][ T5338] __device_attach_driver+0x270/0x410
[ 79.277683][ T5338] bus_for_each_drv+0x258/0x2f0
[ 79.277704][ T5338] ? __pfx___device_attach_driver+0x10/0x10
[ 79.277717][ T5338] ? __pfx_bus_for_each_drv+0x10/0x10
[ 79.277735][ T5338] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 79.277815][ T5338] __device_attach+0x2c4/0x450
[ 79.277830][ T5338] ? __pfx___device_attach+0x10/0x10
[ 79.277848][ T5338] proc_ioctl+0x409/0x660
[ 79.277862][ T5338] proc_ioctl_default+0xc4/0x110
[ 79.277871][ T5338] ? __pfx_proc_ioctl_default+0x10/0x10
[ 79.277885][ T5338] usbdev_ioctl+0x139d/0x21a0
[ 79.277900][ T5338] ? __pfx_usbdev_ioctl+0x10/0x10
[ 79.277911][ T5338] ? __fget_files+0x2a/0x420
[ 79.277941][ T5338] ? bpf_lsm_file_ioctl+0x9/0x20
[ 79.277957][ T5338] ? __pfx_usbdev_ioctl+0x10/0x10
[ 79.277968][ T5338] __se_sys_ioctl+0xfc/0x170
[ 79.277985][ T5338] do_syscall_64+0x166/0x520
[ 79.278009][ T5338] ? trace_irq_disable+0x3b/0x140
[ 79.278025][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.278038][ T5338] ? clear_bhb_loop+0x70/0xc0
[ 79.278054][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.278065][ T5338] RIP: 0033:0x7fd62419f559
[ 79.278089][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.278099][ T5338] RSP: 002b:00007fd62511dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.278115][ T5338] RAX: ffffffffffffffda RBX: 00007fd624425fa0 RCX: 00007fd62419f559
[ 79.278124][ T5338] RDX: 0000200000007040 RSI: 00000000c0105512 RDI: 0000000000000005
[ 79.278132][ T5338] RBP: 00007fd62511e050 R08: 0000000000000000 R09: 0000000000000000
[ 79.278140][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 79.278147][ T5338] R13: 00007fd624426038 R14: 00007fd624425fa0 R15: 00007ffeaff74198
[ 79.278177][ T5338]
[ 79.281014][ T5338] ------------[ cut here ]------------
[ 79.281024][ T5338] ncontrols == 0 || controls[0] == NULL
[ 79.281029][ T5338] WARNING: drivers/media/v4l2-core/v4l2-ctrls-core.c:2557 at v4l2_ctrl_auto_cluster+0x1c1/0x610, CPU#0: syz.0.0/5338
[ 79.458831][ T5338] Modules linked in:
[ 79.460617][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 79.464470][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.468701][ T5338] RIP: 0010:v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.471315][ T5338] Code: ff c7 e9 e8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 73 ff ff ff 48 89 ef e8 ca 9a 1a fa e9 66 ff ff ff e8 40 75 a2 f9 90 <0f> 0b 90 eb 65 e8 35 75 a2 f9 48 8b 44 24 28 80 3c 18 00 74 08 4c
[ 79.479711][ T5338] RSP: 0018:ffffc9000e5a77d8 EFLAGS: 00010293
[ 79.482409][ T5338] RAX: ffffffff8826a2a0 RBX: dffffc0000000000 RCX: ffff888013d44b00
[ 79.485835][ T5338] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 79.489170][ T5338] RBP: 0000000000000000 R08: ffffffff8d01db40 R09: 0000000000000001
[ 79.492522][ T5338] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000000
[ 79.495952][ T5338] R13: 0000000000000000 R14: ffff888036e85628 R15: 0000000000000002
[ 79.499298][ T5338] FS: 00007fd62511e6c0(0000) GS:ffff88808ac32000(0000) knlGS:0000000000000000
[ 79.503285][ T5338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.506268][ T5338] CR2: 00007fd6250dafa0 CR3: 00000000461b9000 CR4: 0000000000352ef0
[ 79.509731][ T5338] Call Trace:
[ 79.511261][ T5338]
[ 79.512628][ T5338] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[ 79.515705][ T5338] hackrf_probe+0x80a/0x1360
[ 79.517825][ T5338] ? __pfx_hackrf_probe+0x10/0x10
[ 79.520156][ T5338] ? __pm_runtime_set_status+0xa96/0xd80
[ 79.522890][ T5338] usb_probe_interface+0x751/0xe00
[ 79.525292][ T5338] ? __pfx_usb_probe_interface+0x10/0x10
[ 79.527846][ T5338] ? kernfs_create_link+0x1cd/0x240
[ 79.530171][ T5338] ? sysfs_do_create_link_sd+0xe0/0x110
[ 79.532627][ T5338] ? driver_sysfs_add+0x1fe/0x210
[ 79.535012][ T5338] ? __pfx_usb_probe_interface+0x10/0x10
[ 79.537590][ T5338] really_probe+0x254/0xae0
[ 79.539687][ T5338] __driver_probe_device+0x1e8/0x360
[ 79.542068][ T5338] driver_probe_device+0x4f/0x240
[ 79.544485][ T5338] __device_attach_driver+0x270/0x410
[ 79.546724][ T5338] bus_for_each_drv+0x258/0x2f0
[ 79.548849][ T5338] ? __pfx___device_attach_driver+0x10/0x10
[ 79.551416][ T5338] ? __pfx_bus_for_each_drv+0x10/0x10
[ 79.553741][ T5338] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 79.557110][ T5338] __device_attach+0x2c4/0x450
[ 79.559186][ T5338] ? __pfx___device_attach+0x10/0x10
[ 79.561451][ T5338] proc_ioctl+0x409/0x660
[ 79.563286][ T5338] proc_ioctl_default+0xc4/0x110
[ 79.565466][ T5338] ? __pfx_proc_ioctl_default+0x10/0x10
[ 79.567793][ T5338] usbdev_ioctl+0x139d/0x21a0
[ 79.569771][ T5338] ? __pfx_usbdev_ioctl+0x10/0x10
[ 79.571881][ T5338] ? __fget_files+0x2a/0x420
[ 79.573750][ T5338] ? bpf_lsm_file_ioctl+0x9/0x20
[ 79.575910][ T5338] ? __pfx_usbdev_ioctl+0x10/0x10
[ 79.578051][ T5338] __se_sys_ioctl+0xfc/0x170
[ 79.580019][ T5338] do_syscall_64+0x166/0x520
[ 79.582015][ T5338] ? trace_irq_disable+0x3b/0x140
[ 79.584224][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.586809][ T5338] ? clear_bhb_loop+0x70/0xc0
[ 79.588978][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.591558][ T5338] RIP: 0033:0x7fd62419f559
[ 79.593493][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.601590][ T5338] RSP: 002b:00007fd62511dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.605119][ T5338] RAX: ffffffffffffffda RBX: 00007fd624425fa0 RCX: 00007fd62419f559
[ 79.608423][ T5338] RDX: 0000200000007040 RSI: 00000000c0105512 RDI: 0000000000000005
[ 79.611635][ T5338] RBP: 00007fd62511e050 R08: 0000000000000000 R09: 0000000000000000
[ 79.615200][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 79.619073][ T5338] R13: 00007fd624426038 R14: 00007fd624425fa0 R15: 00007ffeaff74198
[ 79.622450][ T5338]
[ 79.623759][ T5338] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 79.626863][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 79.630777][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.634995][ T5338] Call Trace:
[ 79.636480][ T5338]
[ 79.637777][ T5338] vpanic+0x56d/0xa60
[ 79.639561][ T5338] ? __pfx__printk+0x10/0x10
[ 79.641507][ T5338] ? __pfx_vpanic+0x10/0x10
[ 79.643462][ T5338] ? is_bpf_text_address+0x292/0x2b0
[ 79.645665][ T5338] ? is_bpf_text_address+0x26/0x2b0
[ 79.647864][ T5338] panic+0xc5/0xd0
[ 79.649493][ T5338] ? __pfx_panic+0x10/0x10
[ 79.651533][ T5338] __warn+0x315/0x4c0
[ 79.653676][ T5338] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.656216][ T5338] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.658660][ T5338] __report_bug+0x276/0x570
[ 79.660598][ T5338] ? v4l2_ctrl_new+0xa5a/0x1820
[ 79.662655][ T5338] ? v4l2_ctrl_new+0xa5a/0x1820
[ 79.664767][ T5338] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.667090][ T5338] ? __pfx___report_bug+0x10/0x10
[ 79.669290][ T5338] ? v4l2_ctrl_new_std+0x24e/0x300
[ 79.671489][ T5338] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.674272][ T5338] report_bug+0x16b/0x220
[ 79.676149][ T5338] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.678397][ T5338] ? v4l2_ctrl_auto_cluster+0x1c3/0x610
[ 79.680631][ T5338] handle_bug+0x9c/0x200
[ 79.682416][ T5338] exc_invalid_op+0x1a/0x50
[ 79.684373][ T5338] asm_exc_invalid_op+0x1a/0x20
[ 79.686296][ T5338] RIP: 0010:v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 79.689444][ T5338] Code: ff c7 e9 e8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 73 ff ff ff 48 89 ef e8 ca 9a 1a fa e9 66 ff ff ff e8 40 75 a2 f9 90 <0f> 0b 90 eb 65 e8 35 75 a2 f9 48 8b 44 24 28 80 3c 18 00 74 08 4c
[ 79.699382][ T5338] RSP: 0018:ffffc9000e5a77d8 EFLAGS: 00010293
[ 79.702563][ T5338] RAX: ffffffff8826a2a0 RBX: dffffc0000000000 RCX: ffff888013d44b00
[ 79.706176][ T5338] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 79.709622][ T5338] RBP: 0000000000000000 R08: ffffffff8d01db40 R09: 0000000000000001
[ 79.713209][ T5338] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000000
[ 79.716791][ T5338] R13: 0000000000000000 R14: ffff888036e85628 R15: 0000000000000002
[ 79.720293][ T5338] ? v4l2_ctrl_auto_cluster+0x1c0/0x610
[ 79.722641][ T5338] ? v4l2_ctrl_auto_cluster+0x1c0/0x610
[ 79.725072][ T5338] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[ 79.727700][ T5338] hackrf_probe+0x80a/0x1360
[ 79.729740][ T5338] ? __pfx_hackrf_probe+0x10/0x10
[ 79.731914][ T5338] ? __pm_runtime_set_status+0xa96/0xd80
[ 79.734347][ T5338] usb_probe_interface+0x751/0xe00
[ 79.736521][ T5338] ? __pfx_usb_probe_interface+0x10/0x10
[ 79.739161][ T5338] ? kernfs_create_link+0x1cd/0x240
[ 79.741400][ T5338] ? sysfs_do_create_link_sd+0xe0/0x110
[ 79.743733][ T5338] ? driver_sysfs_add+0x1fe/0x210
[ 79.745859][ T5338] ? __pfx_usb_probe_interface+0x10/0x10
[ 79.748409][ T5338] really_probe+0x254/0xae0
[ 79.750234][ T5338] __driver_probe_device+0x1e8/0x360
[ 79.752410][ T5338] driver_probe_device+0x4f/0x240
[ 79.754586][ T5338] __device_attach_driver+0x270/0x410
[ 79.756846][ T5338] bus_for_each_drv+0x258/0x2f0
[ 79.759080][ T5338] ? __pfx___device_attach_driver+0x10/0x10
[ 79.761628][ T5338] ? __pfx_bus_for_each_drv+0x10/0x10
[ 79.763947][ T5338] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 79.766509][ T5338] __device_attach+0x2c4/0x450
[ 79.768591][ T5338] ? __pfx___device_attach+0x10/0x10
[ 79.770903][ T5338] proc_ioctl+0x409/0x660
[ 79.772769][ T5338] proc_ioctl_default+0xc4/0x110
[ 79.774849][ T5338] ? __pfx_proc_ioctl_default+0x10/0x10
[ 79.777209][ T5338] usbdev_ioctl+0x139d/0x21a0
[ 79.779145][ T5338] ? __pfx_usbdev_ioctl+0x10/0x10
[ 79.781231][ T5338] ? __fget_files+0x2a/0x420
[ 79.783185][ T5338] ? bpf_lsm_file_ioctl+0x9/0x20
[ 79.785303][ T5338] ? __pfx_usbdev_ioctl+0x10/0x10
[ 79.787450][ T5338] __se_sys_ioctl+0xfc/0x170
[ 79.789425][ T5338] do_syscall_64+0x166/0x520
[ 79.791363][ T5338] ? trace_irq_disable+0x3b/0x140
[ 79.793440][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.796012][ T5338] ? clear_bhb_loop+0x70/0xc0
[ 79.798011][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.800532][ T5338] RIP: 0033:0x7fd62419f559
[ 79.802429][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.810349][ T5338] RSP: 002b:00007fd62511dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.813785][ T5338] RAX: ffffffffffffffda RBX: 00007fd624425fa0 RCX: 00007fd62419f559
[ 79.817023][ T5338] RDX: 0000200000007040 RSI: 00000000c0105512 RDI: 0000000000000005
[ 79.820264][ T5338] RBP: 00007fd62511e050 R08: 0000000000000000 R09: 0000000000000000
[ 79.823594][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 79.826777][ T5338] R13: 00007fd624426038 R14: 00007fd624425fa0 R15: 00007ffeaff74198
[ 79.830208][ T5338]
[ 79.831930][ T5338] Kernel Offset: disabled
[ 79.833791][ T5338] Rebooting in 86400 seconds..