Extracting prog: 1m8.766268917s
Minimizing prog: 1m8.254788173s
Simplifying prog options: 0s
Extracting C: 18.741015098s
Simplifying C: 2m30.393190323s


1 programs, 3 VMs, timeouts [15s 6m0s]
extracting reproducer from 1 programs
single: executing 1 programs separately with timeout 15s
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xbdf, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0)

program crashed: WARNING in usb_free_urb
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): 
detailed listing:
executing program 0:

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xbdf, 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xbdf, &(0x7f0000001040)=ANY=[@ANYBLOB], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
simplifying C reproducer
testing compiled C program (duration=22.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in usb_free_urb
reproducing took 5m6.155279355s
repro crashed as (corrupted=false):
usb 5-1: Product: syz
usb 5-1: Manufacturer: syz
usb 5-1: SerialNumber: syz
smsusb:smsusb_probe: board id=7, interface number 55
smsusb:smsusb_probe: board id=7, interface number 147
smsusb:smsusb_probe: board id=7, interface number 0
smsusb:siano_media_device_register: media controller created
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
------------[ cut here ]------------
WARNING: CPU: 2 PID: 55 at mm/slub.c:4519 free_large_kmalloc+0xda/0x140 mm/slub.c:4519
Modules linked in:
CPU: 2 PID: 55 Comm: kworker/2:1 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:free_large_kmalloc+0xda/0x140 mm/slub.c:4519
Code: 56 fb 8b 43 34 85 c0 75 c7 48 c7 c6 90 f0 26 8d 48 89 df e8 e8 08 f1 ff 90 0f 0b 48 89 df 5b 5d 41 5c 41 5d e9 47 a2 e4 ff 90 <0f> 0b 90 80 3d 3c b9 ee 0d 00 74 28 48 8b 74 24 20 48 89 ef e8 bd
RSP: 0018:ffffc90000a76e18 EFLAGS: 00010246
RAX: 00fff00000000000 RBX: ffffea0000c9d880 RCX: ffffffff813e21dc
RDX: ffff88801a924880 RSI: ffff888032762000 RDI: ffffea0000c9d880
RBP: ffff888032762000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801ade0000
R13: ffff88801ac2b000 R14: dffffc0000000000 R15: ffff88801ade00f0
FS:  0000000000000000(0000) GS:ffff88806b200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f66ab5c8388 CR3: 000000002a16a000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 urb_destroy drivers/usb/core/urb.c:25 [inline]
 kref_put include/linux/kref.h:65 [inline]
 usb_free_urb.part.0+0xf8/0x110 drivers/usb/core/urb.c:97
 usb_free_urb+0x1f/0x30 drivers/usb/core/urb.c:96
 smsusb_term_device+0x108/0x1e0 drivers/media/usb/siano/smsusb.c:352
 smsusb_init_device+0xaa2/0xe10 drivers/media/usb/siano/smsusb.c:497
 smsusb_probe+0x5e2/0x10b0 drivers/media/usb/siano/smsusb.c:575
 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:656
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3721
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:656
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3721
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2db0/0x4e20 drivers/usb/core/hub.c:5903
 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
usb 5-1: Product: syz
usb 5-1: Manufacturer: syz
usb 5-1: SerialNumber: syz
smsusb:smsusb_probe: board id=7, interface number 55
smsusb:smsusb_probe: board id=7, interface number 147
smsusb:smsusb_probe: board id=7, interface number 0
smsusb:siano_media_device_register: media controller created
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
------------[ cut here ]------------
WARNING: CPU: 2 PID: 55 at mm/slub.c:4519 free_large_kmalloc+0xda/0x140 mm/slub.c:4519
Modules linked in:
CPU: 2 PID: 55 Comm: kworker/2:1 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:free_large_kmalloc+0xda/0x140 mm/slub.c:4519
Code: 56 fb 8b 43 34 85 c0 75 c7 48 c7 c6 90 f0 26 8d 48 89 df e8 e8 08 f1 ff 90 0f 0b 48 89 df 5b 5d 41 5c 41 5d e9 47 a2 e4 ff 90 <0f> 0b 90 80 3d 3c b9 ee 0d 00 74 28 48 8b 74 24 20 48 89 ef e8 bd
RSP: 0018:ffffc90000a76e18 EFLAGS: 00010246
RAX: 00fff00000000000 RBX: ffffea0000c9d880 RCX: ffffffff813e21dc
RDX: ffff88801a924880 RSI: ffff888032762000 RDI: ffffea0000c9d880
RBP: ffff888032762000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801ade0000
R13: ffff88801ac2b000 R14: dffffc0000000000 R15: ffff88801ade00f0
FS:  0000000000000000(0000) GS:ffff88806b200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f66ab5c8388 CR3: 000000002a16a000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 urb_destroy drivers/usb/core/urb.c:25 [inline]
 kref_put include/linux/kref.h:65 [inline]
 usb_free_urb.part.0+0xf8/0x110 drivers/usb/core/urb.c:97
 usb_free_urb+0x1f/0x30 drivers/usb/core/urb.c:96
 smsusb_term_device+0x108/0x1e0 drivers/media/usb/siano/smsusb.c:352
 smsusb_init_device+0xaa2/0xe10 drivers/media/usb/siano/smsusb.c:497
 smsusb_probe+0x5e2/0x10b0 drivers/media/usb/siano/smsusb.c:575
 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:656
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3721
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
 call_driver_probe drivers/base/dd.c:578 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:656
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
 device_add+0x114b/0x1a70 drivers/base/core.c:3721
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2db0/0x4e20 drivers/usb/core/hub.c:5903
 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>