Extracting prog: 8m50.964393243s
Minimizing prog: 39m8.611921064s
Simplifying prog options: 0s
Extracting C: 1m49.516976397s
Simplifying C: 10m31.591208001s


extracting reproducer from 8 programs
testing a last program of every proc
single: executing 2 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-syz_usb_control_io-ioctl$EVIOCSKEYCODE-ioctl$EVIOCSKEYCODE-syz_usb_connect$printer
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0x2])
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xa])
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x27, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1b, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x0, 0xb3, 0x5, 0x10, 0x22}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xcb, 0x2, 0x40, 0x8, 0x6, [0x30, 0xd1]}]}})

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$sierra_net-syz_usb_control_io$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io$uac2-syz_usb_control_io$cdc_ncm-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac2-syz_usb_control_io$uac2-syz_usb_control_io$uac3-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001080)={0x40}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 8 programs with base timeout 45s
testing program (duration=47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5, 4, 5, 16, 21, 6, 6]
detailed listing:
executing program 1:
timer_create(0x1, 0x0, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
timer_delete(0x0)
executing program 0:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
close(0x3)
executing program 1:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95)
executing program 0:
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000100)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001080)={0x40}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
executing program 0:
r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x2, &(0x7f0000000100)='\a\x00')
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="400501"]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0x2])
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xa])
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x27, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1b, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x0, 0xb3, 0x5, 0x10, 0x22}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xcb, 0x2, 0x40, 0x8, 0x6, [0x30, 0xd1]}]}})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 2 programs separately with timeout 5m0s
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-syz_usb_control_io-ioctl$EVIOCSKEYCODE-ioctl$EVIOCSKEYCODE-syz_usb_connect$printer
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0x2])
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xa])
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x27, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1b, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x0, 0xb3, 0x5, 0x10, 0x22}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xcb, 0x2, 0x40, 0x8, 0x6, [0x30, 0xd1]}]}})

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-syz_usb_control_io-ioctl$EVIOCSKEYCODE-ioctl$EVIOCSKEYCODE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0x2])
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xa])

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-syz_usb_control_io-ioctl$EVIOCSKEYCODE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0x2])

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$evdev
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
extracting C reproducer
testing compiled C program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
simplifying C reproducer
testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
program crashed: WARNING in trace_suspend_resume/usb_submit_urb
testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
validation run: crashed=true
testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
validation run: crashed=true
testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in trace_suspend_resume/usb_submit_urb
validation run: crashed=true
reproducing took 1h21m46.137512855s
repro crashed as (corrupted=false):
rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input3
------------[ cut here ]------------
WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x518/0x63c drivers/usb/core/urb.c:411, CPU#1: kworker/1:1/3087
usb 2-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType 0
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 UID: 0 PID: 3087 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Workqueue: usb_hub_wq hub_event
Call trace: 
[<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:82a1e6fc r6:00000000 r5:8231ad74 r4:00000001
[<80201af0>] (show_stack) from [<8021e2fc>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201af0>] (show_stack) from [<8021e2fc>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120)
[<8021e2a0>] (dump_stack_lvl) from [<8021e328>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r7:82a1e6fc r6:00000000 r5:83808c40 r4:82c7bd3c
[<8021e310>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320 kernel/panic.c:650)
[<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104 kernel/panic.c:787)
 r7:80f16014
[<80202818>] (panic) from [<802506a8>] (check_panic_on_warn kernel/panic.c:524 [inline])
[<80202818>] (panic) from [<802506a8>] (get_taint+0x0/0x1c kernel/panic.c:519)
 r3:82a0b544 r2:00000001 r1:8230185c r0:8230913c
[<80250630>] (check_panic_on_warn) from [<80250824>] (__warn+0x98/0x1ac kernel/panic.c:1103)
[<8025078c>] (__warn) from [<80250b20>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:1138)
 r8:00000009 r7:8240b1a0 r6:eabd18c4 r5:83808c40 r4:00000000
[<8025093c>] (warn_slowpath_fmt) from [<80f16014>] (usb_submit_urb+0x518/0x63c drivers/usb/core/urb.c:411)
 r10:8530cf4c r9:00000000 r8:00000000 r7:00000001 r6:85fdf844 r5:85fdf800
 r4:85311000
[<80f15afc>] (usb_submit_urb) from [<81168dac>] (igorplugusb_cmd drivers/media/rc/igorplugusb.c:127 [inline])
[<80f15afc>] (usb_submit_urb) from [<81168dac>] (igorplugusb_probe+0x250/0x31c drivers/media/rc/igorplugusb.c:225)
 r10:00000027 r9:00000000 r8:00000000 r7:85fdfa8c r6:852a5800 r5:00000000
 r4:8530cf40
[<81168b5c>] (igorplugusb_probe) from [<80f1b004>] (usb_probe_interface+0x15c/0x3d8 drivers/usb/core/driver.c:396)
 r10:82d280d4 r9:82bb52f0 r8:82bb52f8 r7:85fdf888 r6:81dec46c r5:852a5830
 r4:ffffffed
[<80f1aea8>] (usb_probe_interface) from [<80bac3cc>] (call_driver_probe drivers/base/dd.c:631 [inline])
[<80f1aea8>] (usb_probe_interface) from [<80bac3cc>] (really_probe+0xd8/0x40c drivers/base/dd.c:709)
 r10:8240b678 r9:82b5dc44 r8:00000014 r7:00000000 r6:82bb52f8 r5:00000000
 r4:852a5830
[<80bac2f4>] (really_probe) from [<80bac794>] (__driver_probe_device+0x94/0x1ec drivers/base/dd.c:851)
 r8:00000014 r7:852a5830 r6:eabd1ab4 r5:82bb52f8 r4:852a5830
[<80bac700>] (__driver_probe_device) from [<80bac9cc>] (driver_probe_device+0x3c/0xd8 drivers/base/dd.c:881)
 r9:82b5dc44 r8:00000014 r7:852a5830 r6:eabd1ab4 r5:82d203bc r4:82d203ac
[<80bac990>] (driver_probe_device) from [<80bacb08>] (__device_attach_driver+0xa0/0x138 drivers/base/dd.c:1009)
 r9:82b5dc44 r8:831fa940 r7:852a5830 r6:eabd1ab4 r5:82bb52f8 r4:00000001
[<80baca68>] (__device_attach_driver) from [<80baa000>] (bus_for_each_drv+0x98/0xec drivers/base/bus.c:500)
 r7:831fa900 r6:80baca68 r5:eabd1ab4 r4:00000000
[<80ba9f68>] (bus_for_each_drv) from [<80bacf24>] (__device_attach+0xb0/0x1e4 drivers/base/dd.c:1081)
 r7:831fa900 r6:852a587c r5:00000001 r4:852a5830
[<80bace74>] (__device_attach) from [<80bad218>] (device_initial_probe+0x44/0x48 drivers/base/dd.c:1136)
 r6:831fa900 r5:852a5830 r4:831fa900
[<80bad1d4>] (device_initial_probe) from [<80bab080>] (bus_probe_device+0x30/0x84 drivers/base/bus.c:613)
 r5:852a5830 r4:852a5830
[<80bab050>] (bus_probe_device) from [<80ba82e8>] (device_add+0x5f0/0x814 drivers/base/core.c:3691)
 r9:82b5dc44 r8:81da2ef0 r7:85fdf888 r6:00000000 r5:00000000 r4:852a5830
[<80ba7cf8>] (device_add) from [<80f190b8>] (usb_set_configuration+0x5d8/0x938 drivers/usb/core/message.c:2266)
 r10:8240b678 r9:82c2d4c0 r8:85fdf888 r7:8649d050 r6:00000000 r5:8649d050
 r4:852a5800
[<80f18ae0>] (usb_set_configuration) from [<80f262d0>] (usb_generic_driver_probe+0x48/0x84 drivers/usb/core/generic.c:250)
 r10:8435c128 r9:82b5dc44 r8:00000014 r7:85fdf800 r6:82b84e9c r5:00000000
 r4:85fdf800
[<80f26288>] (usb_generic_driver_probe) from [<80f1a468>] (usb_probe_device+0x44/0x14c drivers/usb/core/driver.c:291)
 r5:00000001 r4:85fdf888
[<80f1a424>] (usb_probe_device) from [<80bac3cc>] (call_driver_probe drivers/base/dd.c:631 [inline])
[<80f1a424>] (usb_probe_device) from [<80bac3cc>] (really_probe+0xd8/0x40c drivers/base/dd.c:709)
 r7:00000000 r6:82b84e9c r5:00000000 r4:85fdf888
[<80bac2f4>] (really_probe) from [<80bac794>] (__driver_probe_device+0x94/0x1ec drivers/base/dd.c:851)
 r8:00000014 r7:85fdf888 r6:eabd1d1c r5:82b84e9c r4:85fdf888
[<80bac700>] (__driver_probe_device) from [<80bac9cc>] (driver_probe_device+0x3c/0xd8 drivers/base/dd.c:881)
 r9:82b5dc44 r8:00000014 r7:85fdf888 r6:eabd1d1c r5:82d203bc r4:82d203ac
[<80bac990>] (driver_probe_device) from [<80bacb08>] (__device_attach_driver+0xa0/0x138 drivers/base/dd.c:1009)
 r9:82b5dc44 r8:831fa940 r7:85fdf888 r6:eabd1d1c r5:82b84e9c r4:00000001
[<80baca68>] (__device_attach_driver) from [<80baa000>] (bus_for_each_drv+0x98/0xec drivers/base/bus.c:500)
 r7:831fa900 r6:80baca68 r5:eabd1d1c r4:00000000
[<80ba9f68>] (bus_for_each_drv) from [<80bacf24>] (__device_attach+0xb0/0x1e4 drivers/base/dd.c:1081)
 r7:831fa900 r6:85fdf8d4 r5:00000001 r4:85fdf888
[<80bace74>] (__device_attach) from [<80bad218>] (device_initial_probe+0x44/0x48 drivers/base/dd.c:1136)
 r6:831fa900 r5:85fdf888 r4:831fa900
[<80bad1d4>] (device_initial_probe) from [<80bab080>] (bus_probe_device+0x30/0x84 drivers/base/bus.c:613)
 r5:85fdf888 r4:85fdf888
[<80bab050>] (bus_probe_device) from [<80ba82e8>] (device_add+0x5f0/0x814 drivers/base/core.c:3691)
 r9:82b5dc44 r8:00000000 r7:84709088 r6:00000000 r5:00000000 r4:85fdf888
[<80ba7cf8>] (device_add) from [<80f0d030>] (usb_new_device+0x28c/0x6b8 drivers/usb/core/hub.c:2695)
 r10:8435c128 r9:00000003 r8:ffffffff r7:00000001 r6:86314f40 r5:85fdf888
 r4:85fdf800
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_port_connect drivers/usb/core/hub.c:5567 [inline])
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_port_connect_change drivers/usb/core/hub.c:5707 [inline])
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (port_event drivers/usb/core/hub.c:5871 [inline])
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_event+0x11ec/0x1b80 drivers/usb/core/hub.c:5953)
 r10:8435c128 r9:85fdf800 r8:84709000 r7:00000001 r6:8435cc00 r5:00000000
 r4:8435cc1c
[<80f0e6f8>] (hub_event) from [<80276360>] (process_one_work+0x1c8/0x5a0 kernel/workqueue.c:3302)
 r10:8302fa05 r9:83808c40 r8:01800000 r7:ddde4e00 r6:8302fa00 r5:8435c128
 r4:83112e00
[<80276198>] (process_one_work) from [<80277124>] (process_scheduled_works kernel/workqueue.c:3385 [inline])
[<80276198>] (process_one_work) from [<80277124>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3466)
 r10:00000000 r9:83112e30 r8:83808c40 r7:82a03d80 r6:ddde4e20 r5:ddde4e00
 r4:83112e00
[<80276fb8>] (worker_thread) from [<8028117c>] (kthread+0x11c/0x154 kernel/kthread.c:436)
 r10:00000000 r9:df879e88 r8:8489f580 r7:83112e00 r6:80276fb8 r5:83808c40
 r4:85c05400
[<80281060>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xeabd1fb0 to 0xeabd1ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281060 r4:85c05400
Rebooting in 86400 seconds..

final repro crashed as (corrupted=false):
rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input3
------------[ cut here ]------------
WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x518/0x63c drivers/usb/core/urb.c:411, CPU#1: kworker/1:1/3087
usb 2-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType 0
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 UID: 0 PID: 3087 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Workqueue: usb_hub_wq hub_event
Call trace: 
[<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:82a1e6fc r6:00000000 r5:8231ad74 r4:00000001
[<80201af0>] (show_stack) from [<8021e2fc>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201af0>] (show_stack) from [<8021e2fc>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120)
[<8021e2a0>] (dump_stack_lvl) from [<8021e328>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r7:82a1e6fc r6:00000000 r5:83808c40 r4:82c7bd3c
[<8021e310>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320 kernel/panic.c:650)
[<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104 kernel/panic.c:787)
 r7:80f16014
[<80202818>] (panic) from [<802506a8>] (check_panic_on_warn kernel/panic.c:524 [inline])
[<80202818>] (panic) from [<802506a8>] (get_taint+0x0/0x1c kernel/panic.c:519)
 r3:82a0b544 r2:00000001 r1:8230185c r0:8230913c
[<80250630>] (check_panic_on_warn) from [<80250824>] (__warn+0x98/0x1ac kernel/panic.c:1103)
[<8025078c>] (__warn) from [<80250b20>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:1138)
 r8:00000009 r7:8240b1a0 r6:eabd18c4 r5:83808c40 r4:00000000
[<8025093c>] (warn_slowpath_fmt) from [<80f16014>] (usb_submit_urb+0x518/0x63c drivers/usb/core/urb.c:411)
 r10:8530cf4c r9:00000000 r8:00000000 r7:00000001 r6:85fdf844 r5:85fdf800
 r4:85311000
[<80f15afc>] (usb_submit_urb) from [<81168dac>] (igorplugusb_cmd drivers/media/rc/igorplugusb.c:127 [inline])
[<80f15afc>] (usb_submit_urb) from [<81168dac>] (igorplugusb_probe+0x250/0x31c drivers/media/rc/igorplugusb.c:225)
 r10:00000027 r9:00000000 r8:00000000 r7:85fdfa8c r6:852a5800 r5:00000000
 r4:8530cf40
[<81168b5c>] (igorplugusb_probe) from [<80f1b004>] (usb_probe_interface+0x15c/0x3d8 drivers/usb/core/driver.c:396)
 r10:82d280d4 r9:82bb52f0 r8:82bb52f8 r7:85fdf888 r6:81dec46c r5:852a5830
 r4:ffffffed
[<80f1aea8>] (usb_probe_interface) from [<80bac3cc>] (call_driver_probe drivers/base/dd.c:631 [inline])
[<80f1aea8>] (usb_probe_interface) from [<80bac3cc>] (really_probe+0xd8/0x40c drivers/base/dd.c:709)
 r10:8240b678 r9:82b5dc44 r8:00000014 r7:00000000 r6:82bb52f8 r5:00000000
 r4:852a5830
[<80bac2f4>] (really_probe) from [<80bac794>] (__driver_probe_device+0x94/0x1ec drivers/base/dd.c:851)
 r8:00000014 r7:852a5830 r6:eabd1ab4 r5:82bb52f8 r4:852a5830
[<80bac700>] (__driver_probe_device) from [<80bac9cc>] (driver_probe_device+0x3c/0xd8 drivers/base/dd.c:881)
 r9:82b5dc44 r8:00000014 r7:852a5830 r6:eabd1ab4 r5:82d203bc r4:82d203ac
[<80bac990>] (driver_probe_device) from [<80bacb08>] (__device_attach_driver+0xa0/0x138 drivers/base/dd.c:1009)
 r9:82b5dc44 r8:831fa940 r7:852a5830 r6:eabd1ab4 r5:82bb52f8 r4:00000001
[<80baca68>] (__device_attach_driver) from [<80baa000>] (bus_for_each_drv+0x98/0xec drivers/base/bus.c:500)
 r7:831fa900 r6:80baca68 r5:eabd1ab4 r4:00000000
[<80ba9f68>] (bus_for_each_drv) from [<80bacf24>] (__device_attach+0xb0/0x1e4 drivers/base/dd.c:1081)
 r7:831fa900 r6:852a587c r5:00000001 r4:852a5830
[<80bace74>] (__device_attach) from [<80bad218>] (device_initial_probe+0x44/0x48 drivers/base/dd.c:1136)
 r6:831fa900 r5:852a5830 r4:831fa900
[<80bad1d4>] (device_initial_probe) from [<80bab080>] (bus_probe_device+0x30/0x84 drivers/base/bus.c:613)
 r5:852a5830 r4:852a5830
[<80bab050>] (bus_probe_device) from [<80ba82e8>] (device_add+0x5f0/0x814 drivers/base/core.c:3691)
 r9:82b5dc44 r8:81da2ef0 r7:85fdf888 r6:00000000 r5:00000000 r4:852a5830
[<80ba7cf8>] (device_add) from [<80f190b8>] (usb_set_configuration+0x5d8/0x938 drivers/usb/core/message.c:2266)
 r10:8240b678 r9:82c2d4c0 r8:85fdf888 r7:8649d050 r6:00000000 r5:8649d050
 r4:852a5800
[<80f18ae0>] (usb_set_configuration) from [<80f262d0>] (usb_generic_driver_probe+0x48/0x84 drivers/usb/core/generic.c:250)
 r10:8435c128 r9:82b5dc44 r8:00000014 r7:85fdf800 r6:82b84e9c r5:00000000
 r4:85fdf800
[<80f26288>] (usb_generic_driver_probe) from [<80f1a468>] (usb_probe_device+0x44/0x14c drivers/usb/core/driver.c:291)
 r5:00000001 r4:85fdf888
[<80f1a424>] (usb_probe_device) from [<80bac3cc>] (call_driver_probe drivers/base/dd.c:631 [inline])
[<80f1a424>] (usb_probe_device) from [<80bac3cc>] (really_probe+0xd8/0x40c drivers/base/dd.c:709)
 r7:00000000 r6:82b84e9c r5:00000000 r4:85fdf888
[<80bac2f4>] (really_probe) from [<80bac794>] (__driver_probe_device+0x94/0x1ec drivers/base/dd.c:851)
 r8:00000014 r7:85fdf888 r6:eabd1d1c r5:82b84e9c r4:85fdf888
[<80bac700>] (__driver_probe_device) from [<80bac9cc>] (driver_probe_device+0x3c/0xd8 drivers/base/dd.c:881)
 r9:82b5dc44 r8:00000014 r7:85fdf888 r6:eabd1d1c r5:82d203bc r4:82d203ac
[<80bac990>] (driver_probe_device) from [<80bacb08>] (__device_attach_driver+0xa0/0x138 drivers/base/dd.c:1009)
 r9:82b5dc44 r8:831fa940 r7:85fdf888 r6:eabd1d1c r5:82b84e9c r4:00000001
[<80baca68>] (__device_attach_driver) from [<80baa000>] (bus_for_each_drv+0x98/0xec drivers/base/bus.c:500)
 r7:831fa900 r6:80baca68 r5:eabd1d1c r4:00000000
[<80ba9f68>] (bus_for_each_drv) from [<80bacf24>] (__device_attach+0xb0/0x1e4 drivers/base/dd.c:1081)
 r7:831fa900 r6:85fdf8d4 r5:00000001 r4:85fdf888
[<80bace74>] (__device_attach) from [<80bad218>] (device_initial_probe+0x44/0x48 drivers/base/dd.c:1136)
 r6:831fa900 r5:85fdf888 r4:831fa900
[<80bad1d4>] (device_initial_probe) from [<80bab080>] (bus_probe_device+0x30/0x84 drivers/base/bus.c:613)
 r5:85fdf888 r4:85fdf888
[<80bab050>] (bus_probe_device) from [<80ba82e8>] (device_add+0x5f0/0x814 drivers/base/core.c:3691)
 r9:82b5dc44 r8:00000000 r7:84709088 r6:00000000 r5:00000000 r4:85fdf888
[<80ba7cf8>] (device_add) from [<80f0d030>] (usb_new_device+0x28c/0x6b8 drivers/usb/core/hub.c:2695)
 r10:8435c128 r9:00000003 r8:ffffffff r7:00000001 r6:86314f40 r5:85fdf888
 r4:85fdf800
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_port_connect drivers/usb/core/hub.c:5567 [inline])
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_port_connect_change drivers/usb/core/hub.c:5707 [inline])
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (port_event drivers/usb/core/hub.c:5871 [inline])
[<80f0cda4>] (usb_new_device) from [<80f0f8e4>] (hub_event+0x11ec/0x1b80 drivers/usb/core/hub.c:5953)
 r10:8435c128 r9:85fdf800 r8:84709000 r7:00000001 r6:8435cc00 r5:00000000
 r4:8435cc1c
[<80f0e6f8>] (hub_event) from [<80276360>] (process_one_work+0x1c8/0x5a0 kernel/workqueue.c:3302)
 r10:8302fa05 r9:83808c40 r8:01800000 r7:ddde4e00 r6:8302fa00 r5:8435c128
 r4:83112e00
[<80276198>] (process_one_work) from [<80277124>] (process_scheduled_works kernel/workqueue.c:3385 [inline])
[<80276198>] (process_one_work) from [<80277124>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3466)
 r10:00000000 r9:83112e30 r8:83808c40 r7:82a03d80 r6:ddde4e20 r5:ddde4e00
 r4:83112e00
[<80276fb8>] (worker_thread) from [<8028117c>] (kthread+0x11c/0x154 kernel/kthread.c:436)
 r10:00000000 r9:df879e88 r8:8489f580 r7:83112e00 r6:80276fb8 r5:83808c40
 r4:85c05400
[<80281060>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xeabd1fb0 to 0xeabd1ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281060 r4:85c05400
Rebooting in 86400 seconds..