Extracting prog: 2m6.135286973s
Minimizing prog: 5m59.438282209s
Simplifying prog options: 0s
Extracting C: 1m47.501796601s
Simplifying C: 17m4.12417777s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x13c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x39, 0x3e, 0x30, 0x40, 0x12d1, 0x1439, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12a, 0x3, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x1, 0x1, 0xda, 0x56, 0x8c, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x7f, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}]}}]}}, {{0x9, 0x4, 0x2e, 0x5, 0x3, 0x48, 0x86, 0xa, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2008}, {0xd, 0x24, 0xf, 0x1, 0x35, 0x586, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xb, 0x7ff}]}], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x0, 0x89, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}, @generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x20, 0x0, 0x3, [@generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0xd2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}]}}]}}, {{0x9, 0x4, 0x95, 0x20, 0x4, 0xe, 0x1, 0x0, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0xe1, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0xca}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6d, 0x8001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0x7f}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf0, 0x4, 0x80, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x2, 0x1}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x41}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1f, 0x0, 0x5, 0x5}]}], [{{0x9, 0x5, 0x2, 0x2, 0x57056a70adfc4361, 0xfb, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x1f, 0xbb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc4, 0x11, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}]}}]}}]}}]}}, 0x0)

program crashed: WARNING in uvc_status_unregister
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=53.628556314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=53.628556314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x114, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x39, 0x3e, 0x30, 0x40, 0x12d1, 0x1439, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x1, 0x1, 0xda, 0x56, 0x8c, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x7f, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}]}}]}}, {{0x9, 0x4, 0x2e, 0x5, 0x3, 0x48, 0x86, 0xa, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2008}, {0xd, 0x24, 0xf, 0x1, 0x35, 0x586, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xb, 0x7ff}]}], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x0, 0x89, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}, @generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x20, 0x0, 0x3, [@generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0xd2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}]}}]}}, {{0x9, 0x4, 0x95, 0x20, 0x4, 0xe, 0x1, 0x0, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0xe1, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0xca}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6d, 0x8001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0x7f}]}, @uac_as], [{{0x9, 0x5, 0x2, 0x2, 0x57056a70adfc4361, 0xfb, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x1f, 0xbb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc4, 0x11, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}]}}]}}]}}]}}, 0x0)

program crashed: WARNING in uvc_status_unregister
testing program (duration=53.628556314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xf4, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x39, 0x3e, 0x30, 0x40, 0x12d1, 0x1439, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x1, 0x1, 0xda, 0x56, 0x8c, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x7f, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}]}}]}}, {{0x9, 0x4, 0x2e, 0x5, 0x3, 0x48, 0x86, 0xa, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2008}, {0xd, 0x24, 0xf, 0x1, 0x35, 0x586, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xb, 0x7ff}]}], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x0, 0x89, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}, @generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x20, 0x0, 0x3, [@generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0xd2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}]}}]}}, {{0x9, 0x4, 0x95, 0x20, 0x4, 0xe, 0x1, 0x0, 0x1, [@uac_as, @uac_as], [{{0x9, 0x5, 0x2, 0x2, 0x57056a70adfc4361, 0xfb, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x1f, 0xbb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc4, 0x11, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}]}}]}}]}}]}}, 0x0)

program crashed: WARNING in uvc_status_unregister
testing program (duration=53.628556314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xc0, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x39, 0x3e, 0x30, 0x40, 0x12d1, 0x1439, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x1, 0x1, 0xda, 0x56, 0x8c, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x7f, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}]}}]}}, {{0x9, 0x4, 0x2e, 0x5, 0x3, 0x48, 0x86, 0xa, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2008}, {0xd, 0x24, 0xf, 0x1, 0x35, 0x586, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xb, 0x7ff}]}], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x0, 0x89, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}, @generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x20, 0x0, 0x3, [@generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0xd2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}]}}]}}, {{0x9, 0x4, 0x95, 0x20, 0x0, 0xe, 0x1, 0x0, 0x1, [@uac_as, @uac_as]}}]}}]}}, 0x0)

program crashed: WARNING in uvc_status_unregister
testing program (duration=53.628556314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x39, 0x3e, 0x30, 0x40, 0x12d1, 0x1439, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x1, 0x1, 0xda, 0x56, 0x8c, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x7f, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}]}}]}}, {{0x9, 0x4, 0x2e, 0x5, 0x0, 0x48, 0x86, 0xa, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2008}, {0xd, 0x24, 0xf, 0x1, 0x35, 0x586, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xb, 0x7ff}]}]}}, {{0x9, 0x4, 0x95, 0x20, 0x0, 0xe, 0x1, 0x0, 0x1, [@uac_as, @uac_as]}}]}}]}}, 0x0)

program crashed: WARNING in uvc_status_unregister
extracting C reproducer
testing compiled C program (duration=53.628556314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
simplifying C reproducer
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in uvc_status_unregister
testing compiled C program (duration=53.628556314s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program did not crash
reproducing took 26m57.19957285s
repro crashed as (corrupted=false):
usb 1-1: SerialNumber: syz
usb-storage 1-1:1.117: USB Mass Storage device detected
usb-storage 1-1:1.46: USB Mass Storage device detected
usb-storage 1-1:1.149: USB Mass Storage device detected
usb 1-1: Found UVC 0.00 device syz (12d1:1439)
usb 1-1: No valid video chain found.
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(lock->magic != lock)
WARNING: CPU: 1 PID: 5840 at kernel/locking/mutex.c:564 __mutex_lock_common kernel/locking/mutex.c:564 [inline]
WARNING: CPU: 1 PID: 5840 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 kernel/locking/mutex.c:735
Modules linked in:
CPU: 1 UID: 0 PID: 5840 Comm: kworker/1:3 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:564 [inline]
RIP: 0010:__mutex_lock+0xdac/0xee0 kernel/locking/mutex.c:735
Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef e4 54 04 00 75 19 90 48 c7 c7 60 c2 0a 8c 48 c7 c6 00 c3 0a 8c e8 35 14 8f f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b
RSP: 0018:ffffc900035a6940 EFLAGS: 00010246
RAX: f4af8e89acf6aa00 RBX: ffff88802732e518 RCX: ffff888035509e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900035a6ad0 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0
R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffff920006b4d3c R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005601ae6a8978 CR3: 000000007a0b8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 class_mutex_constructor include/linux/mutex.h:201 [inline]
 uvc_status_suspend drivers/media/usb/uvc/uvc_status.c:375 [inline]
 uvc_status_unregister+0x2f/0xe0 drivers/media/usb/uvc/uvc_status.c:297
 uvc_unregister_video+0x12b/0x200 drivers/media/usb/uvc/uvc_driver.c:1977
 uvc_probe+0x9154/0x98e0 drivers/media/usb/uvc/uvc_driver.c:2302
 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3672
 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254
 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3672
 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2d6d/0x5150 drivers/usb/core/hub.c:5903
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
usb 1-1: SerialNumber: syz
usb-storage 1-1:1.117: USB Mass Storage device detected
usb-storage 1-1:1.46: USB Mass Storage device detected
usb-storage 1-1:1.149: USB Mass Storage device detected
usb 1-1: Found UVC 0.00 device syz (12d1:1439)
usb 1-1: No valid video chain found.
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(lock->magic != lock)
WARNING: CPU: 1 PID: 5840 at kernel/locking/mutex.c:564 __mutex_lock_common kernel/locking/mutex.c:564 [inline]
WARNING: CPU: 1 PID: 5840 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 kernel/locking/mutex.c:735
Modules linked in:
CPU: 1 UID: 0 PID: 5840 Comm: kworker/1:3 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:564 [inline]
RIP: 0010:__mutex_lock+0xdac/0xee0 kernel/locking/mutex.c:735
Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef e4 54 04 00 75 19 90 48 c7 c7 60 c2 0a 8c 48 c7 c6 00 c3 0a 8c e8 35 14 8f f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b
RSP: 0018:ffffc900035a6940 EFLAGS: 00010246
RAX: f4af8e89acf6aa00 RBX: ffff88802732e518 RCX: ffff888035509e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900035a6ad0 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0
R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffff920006b4d3c R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005601ae6a8978 CR3: 000000007a0b8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 class_mutex_constructor include/linux/mutex.h:201 [inline]
 uvc_status_suspend drivers/media/usb/uvc/uvc_status.c:375 [inline]
 uvc_status_unregister+0x2f/0xe0 drivers/media/usb/uvc/uvc_status.c:297
 uvc_unregister_video+0x12b/0x200 drivers/media/usb/uvc/uvc_driver.c:1977
 uvc_probe+0x9154/0x98e0 drivers/media/usb/uvc/uvc_driver.c:2302
 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3672
 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254
 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3672
 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2d6d/0x5150 drivers/usb/core/hub.c:5903
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>