Extracting prog: 5m54.188972735s Minimizing prog: 37m53.013677528s Simplifying prog options: 2m18.452201866s Extracting C: 1m30.816472113s Simplifying C: 6m46.603004469s extracting reproducer from 37 programs testing a last program of every proc single: executing 7 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$fou-prlimit64-sched_setscheduler-getpid-sched_setscheduler-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-mkdir-mkdir-open-fcntl$notify-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-ioctl$FS_IOC_RESVSP-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS-ioctl$USBDEVFS_REAPURBNDELAY detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x66, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3d}) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000380)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route_sched-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-sched_setaffinity-lsetxattr$system_posix_acl-mkdirat-getxattr-syz_open_dev$MSR-read$msr-openat$audio-ioctl$SNDCTL_DSP_CHANNELS-socketpair$unix-connect$pppoe-keyctl$instantiate-add_key-keyctl$read-preadv2-ioctl$SNDCTL_DSP_SPEED-read$dsp-socket$netlink-socketpair$unix-fcntl$getown-syz_open_procfs-writev-socket$nl_rdma-syz_init_net_socket$nl_generic-request_key-keyctl$read detailed listing: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x166b1ab5eb710134) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/4096, 0x1000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x187001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) preadv2(r2, 0x0, 0x0, 0x4, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fcntl$getown(r4, 0x9) syz_open_procfs(r5, &(0x7f0000001840)='net/unix\x00') writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', r3) keyctl$read(0xb, r6, &(0x7f0000000380)=""/21, 0x15) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet-socket$nl_route-socket$nl_route-sendmsg$nl_route-socket$rds-ioctl$vim2m_VIDIOC_S_FMT-prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-sched_setaffinity-syz_open_dev$MSR-read$msr-socket$kcm-sendmsg$kcm-syz_io_uring_setup-bpf$MAP_CREATE-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_WRITEPROTECT-socket$kcm-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$UFFDIO_COPY-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter-sendmsg$nl_route-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-mkdir-listxattr detailed listing: executing program 0: syz_emit_ethernet(0x5a, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x7, 0x0, 0x24002}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x6004000}, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x810) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001300)=ANY=[@ANYBLOB="0a00000017000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="0002000000001ce7adfb590e9c9b000000000000e1c747b5f88744f8ee721c4730ee46f0c6ceb2305db35ac8595ecd20982bce969d23980d6bd3f26a996578d983d256c55e1360dbce27292a4d541874d33b12a43f510d4dbf1b0a55517bf473ce17da6ff50e6878f61f9b981f4c4e7542e32f2ab64703da4d39379bda898a5b7bbab68a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r5 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x10, 0x7, 0x2, 0x26db, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1}}}}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0xa290, 0xc2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3b04}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4059d}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS-openat$cgroup_ro-mmap-ioctl$USBDEVFS_REAPURBNDELAY-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CONTROL_PORT_FRAME detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4008550d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) program crashed: WARNING in iguanair_probe/usb_submit_urb single: successfully extracted reproducer found reproducer with 25 syscalls minimizing guilty program testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS-openat$cgroup_ro-mmap-ioctl$USBDEVFS_REAPURBNDELAY-ioctl$sock_SIOCGIFINDEX_80211 detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS-openat$cgroup_ro-mmap-ioctl$USBDEVFS_REAPURBNDELAY detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, 0x0) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS-openat$cgroup_ro-mmap detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS-openat$cgroup_ro detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-ioctl$USBDEVFS_FREE_STREAMS detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) program did not crash testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x4, 0x20, 0x1}, @alu={0x7, 0x1, 0x1, 0x4, 0x7, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x61, '\x00', r4, @fallback=0x37, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0xe}, 0x10, r5, r6, 0x8, &(0x7f0000000ac0)=[r1, r1, r1, r2, r7], &(0x7f0000000b00)=[{0x5, 0x3, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x1, 0x6, 0x10}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x1, 0x10}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x6, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5f17, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-bpf$PROG_LOAD-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x48, &(0x7f0000000780)=""/252, 0x41000, 0x70, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0xffffc5ec, 0xd3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r1, r1], &(0x7f0000000940), 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-bpf$TOKEN_CREATE-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r0}, 0x8) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-bpf$BPF_GET_PROG_INFO-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-getpeername$packet-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-ioctl$TIOCSWINSZ-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$tty1-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-connect$inet-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-socket$nl_generic-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-bpf$MAP_CREATE-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program did not crash testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-ioctl$LOOP_CHANGE_FD-syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-write$binfmt_misc-syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_init_net_socket$x25-syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program did not crash testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program did not crash testing program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(0x0, 0x80000000003, 0x101301) program did not crash extracting C reproducer testing compiled C program (duration=53.836320405s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program did not crash simplifying guilty program options testing program (duration=53.836320405s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) program crashed: WARNING in iguanair_probe/usb_submit_urb extracting C reproducer testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb simplifying C reproducer testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb testing compiled C program (duration=53.836320405s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs program crashed: WARNING in iguanair_probe/usb_submit_urb reproducing took 54m58.589194689s repro crashed as (corrupted=false): ------------[ cut here ]------------ URB ffff8880252cb200 submitted while active WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379 Modules linked in: CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379 Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 be bc b2 fa c6 05 50 c9 6d 09 01 90 48 c7 c7 c0 c9 2d 8c 48 89 de e8 77 64 73 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef RSP: 0018:ffffc900000e7038 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff8880252cb200 RCX: ffffffff814e8a49 RDX: ffff88801c6ac880 RSI: ffffffff814e8a56 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880252cb200 R13: ffff888022fd9430 R14: ffff888022fd94a8 R15: ffff8880274f8000 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f90ef3f2300 CR3: 000000007a22e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: iguanair_send drivers/media/rc/iguanair.c:193 [inline] iguanair_get_features drivers/media/rc/iguanair.c:218 [inline] iguanair_probe+0xe78/0x22a0 drivers/media/rc/iguanair.c:438 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534 device_add+0x114b/0x1a70 drivers/base/core.c:3672 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534 device_add+0x114b/0x1a70 drivers/base/core.c:3672 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d9a/0x4e10 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): ------------[ cut here ]------------ URB ffff8880252cb200 submitted while active WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379 Modules linked in: CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379 Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 be bc b2 fa c6 05 50 c9 6d 09 01 90 48 c7 c7 c0 c9 2d 8c 48 89 de e8 77 64 73 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef RSP: 0018:ffffc900000e7038 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff8880252cb200 RCX: ffffffff814e8a49 RDX: ffff88801c6ac880 RSI: ffffffff814e8a56 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880252cb200 R13: ffff888022fd9430 R14: ffff888022fd94a8 R15: ffff8880274f8000 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f90ef3f2300 CR3: 000000007a22e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: iguanair_send drivers/media/rc/iguanair.c:193 [inline] iguanair_get_features drivers/media/rc/iguanair.c:218 [inline] iguanair_probe+0xe78/0x22a0 drivers/media/rc/iguanair.c:438 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534 device_add+0x114b/0x1a70 drivers/base/core.c:3672 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534 device_add+0x114b/0x1a70 drivers/base/core.c:3672 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d9a/0x4e10 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244