Extracting prog: 5m59.191447028s Minimizing prog: 15m37.815053722s Simplifying prog options: 0s Extracting C: 1m29.557772696s Simplifying C: 8m5.9141358s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe2$watch_queue-mkdirat-mkdir-mkdir-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$inet6_mptcp-bpf$BPF_RAW_TRACEPOINT_OPEN-prlimit64-sched_setscheduler-getpid-connect$pppl2tp-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-ioctl$FS_IOC_FIEMAP-close_range-socket$nl_netfilter-setsockopt$IP6T_SO_SET_REPLACE-sendmsg$IPCTNL_MSG_TIMEOUT_NEW detailed listing: executing program 0: pipe2$watch_queue(0x0, 0x80) mkdirat(0xffffffffffffffff, 0x0, 0xa) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1c6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="880000000008050000000000000000000a00000a050003003a00000006000240f10500000900010073797a30000000000900010073797a30000000004c00048008"], 0x88}}, 0x20000000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-prlimit64-sched_setscheduler-socket-getsockname$packet-syz_genetlink_get_family_id$SEG6-sched_setaffinity-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-syz_open_dev$sg-openat$sysfs-sendfile-migrate_pages-openat$ptp0-ioctl$PTP_SYS_OFFSET-sendmsg$kcm detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x1b, 0x0, &(0x7f0000000040)="263a17e0bf797361c053c88cbd6688a8640088a8439e32090611e5", 0x0, 0x1200, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r3, r3, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0xc0403d08, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-sendmsg$IEEE802154_LIST_PHY-prctl$PR_GET_SPECULATION_CTRL-setsockopt-socket$kcm-setsockopt$inet_sctp6_SCTP_AUTH_KEY-openat$vim2m-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH-syz_open_dev$MSR-socket$inet-setsockopt$IPT_SO_SET_REPLACE-openat$vmci-read$msr-bpf$PROG_LOAD-openat$zero-fsconfig$FSCONFIG_SET_STRING-recvmmsg-vmsplice-socket$rxrpc-socketpair$nbd detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x4065, r0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x288202, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000940)='./\'{%-\x00', &(0x7f0000000980)='fsuuid', 0x0) recvmmsg(r1, &(0x7f000001e800)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/183, 0xb7}, {0x0}], 0x2}, 0x5}, {{&(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/50, 0x32}, {&(0x7f0000002280)=""/43, 0x2b}], 0x2}, 0x1}, {{&(0x7f0000002300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f000001e700)=[{&(0x7f0000002380)=""/254, 0xfe}, {&(0x7f000001e940)=""/19, 0x13}, {&(0x7f000001d700)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/173, 0xad}, {&(0x7f0000002580)=""/189, 0xbd}, {&(0x7f0000002640)=""/150, 0x96}], 0x6, &(0x7f000001e780)=""/78, 0x4e}, 0xc}], 0x3, 0x60000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000400)="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", 0xc00}, {&(0x7f000001b700)="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", 0xff8}, {&(0x7f0000000280)}], 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$cuse detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING in ath6kl_bmi_get_target_info single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) program did not crash testing program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=45.50557942s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info simplifying C reproducer testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing compiled C program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io program crashed: WARNING in ath6kl_bmi_get_target_info testing program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING in ath6kl_bmi_get_target_info validation run: crashed=true testing program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING in ath6kl_bmi_get_target_info validation run: crashed=true testing program (duration=45.50557942s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING in ath6kl_bmi_get_target_info validation run: crashed=true reproducing took 36m14.616381836s repro crashed as (corrupted=false): usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb 1-1: config 0 descriptor?? ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1108 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x494/0x5d0 drivers/net/wireless/ath/ath6kl/bmi.c:90 Modules linked in: CPU: 0 PID: 1108 Comm: kworker/0:2 Not tainted 5.15.186-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: usb_hub_wq hub_event RIP: 0010:ath6kl_bmi_get_target_info+0x494/0x5d0 drivers/net/wireless/ath/ath6kl/bmi.c:90 Code: 04 20 84 c0 0f 85 36 01 00 00 48 8b 44 24 10 8b 30 48 c7 c7 20 ea 98 8a 44 89 ea e8 46 f9 25 04 e9 e1 fd ff ff e8 ec d6 f9 fb <0f> 0b 41 bd ea ff ff ff e9 cf fd ff ff e8 da d6 f9 fb 45 31 ed e9 RSP: 0018:ffffc90004736c60 EFLAGS: 00010293 RAX: ffffffff857dec24 RBX: 1ffff920008e6d94 RCX: ffff888020e43b80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c RBP: ffffc90004736d30 R08: dffffc0000000000 R09: fffffbfff1ff7427 R10: fffffbfff1ff7427 R11: 1ffffffff1ff7426 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff888077430da0 R15: 1ffff1100ee861ba FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa1c1197d60 CR3: 000000002aa56000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ath6kl_core_init+0x1fe/0x10c0 drivers/net/wireless/ath/ath6kl/core.c:101 ath6kl_usb_probe+0x1302/0x1410 drivers/net/wireless/ath/ath6kl/usb.c:1160 usb_probe_interface+0x5a0/0xaf0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x284/0xc80 drivers/base/dd.c:595 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:755 driver_probe_device+0x4f/0x420 drivers/base/dd.c:785 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:907 bus_for_each_drv+0x175/0x200 drivers/base/bus.c:429 __device_attach+0x29b/0x460 drivers/base/dd.c:979 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489 device_add+0xa00/0xfb0 drivers/base/core.c:3412 usb_set_configuration+0x1991/0x1fd0 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238 usb_probe_device+0x139/0x270 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x284/0xc80 drivers/base/dd.c:595 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:755 driver_probe_device+0x4f/0x420 drivers/base/dd.c:785 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:907 bus_for_each_drv+0x175/0x200 drivers/base/bus.c:429 __device_attach+0x29b/0x460 drivers/base/dd.c:979 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489 device_add+0xa00/0xfb0 drivers/base/core.c:3412 usb_new_device+0xd53/0x1640 drivers/usb/core/hub.c:2604 hub_port_connect drivers/usb/core/hub.c:5467 [inline] hub_port_connect_change drivers/usb/core/hub.c:5607 [inline] port_event drivers/usb/core/hub.c:5753 [inline] hub_event+0x295c/0x4fa0 drivers/usb/core/hub.c:5835 process_one_work+0x863/0x1000 kernel/workqueue.c:2310 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 final repro crashed as (corrupted=false): usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb 1-1: config 0 descriptor?? ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1108 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x494/0x5d0 drivers/net/wireless/ath/ath6kl/bmi.c:90 Modules linked in: CPU: 0 PID: 1108 Comm: kworker/0:2 Not tainted 5.15.186-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: usb_hub_wq hub_event RIP: 0010:ath6kl_bmi_get_target_info+0x494/0x5d0 drivers/net/wireless/ath/ath6kl/bmi.c:90 Code: 04 20 84 c0 0f 85 36 01 00 00 48 8b 44 24 10 8b 30 48 c7 c7 20 ea 98 8a 44 89 ea e8 46 f9 25 04 e9 e1 fd ff ff e8 ec d6 f9 fb <0f> 0b 41 bd ea ff ff ff e9 cf fd ff ff e8 da d6 f9 fb 45 31 ed e9 RSP: 0018:ffffc90004736c60 EFLAGS: 00010293 RAX: ffffffff857dec24 RBX: 1ffff920008e6d94 RCX: ffff888020e43b80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c RBP: ffffc90004736d30 R08: dffffc0000000000 R09: fffffbfff1ff7427 R10: fffffbfff1ff7427 R11: 1ffffffff1ff7426 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff888077430da0 R15: 1ffff1100ee861ba FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa1c1197d60 CR3: 000000002aa56000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ath6kl_core_init+0x1fe/0x10c0 drivers/net/wireless/ath/ath6kl/core.c:101 ath6kl_usb_probe+0x1302/0x1410 drivers/net/wireless/ath/ath6kl/usb.c:1160 usb_probe_interface+0x5a0/0xaf0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x284/0xc80 drivers/base/dd.c:595 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:755 driver_probe_device+0x4f/0x420 drivers/base/dd.c:785 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:907 bus_for_each_drv+0x175/0x200 drivers/base/bus.c:429 __device_attach+0x29b/0x460 drivers/base/dd.c:979 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489 device_add+0xa00/0xfb0 drivers/base/core.c:3412 usb_set_configuration+0x1991/0x1fd0 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238 usb_probe_device+0x139/0x270 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x284/0xc80 drivers/base/dd.c:595 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:755 driver_probe_device+0x4f/0x420 drivers/base/dd.c:785 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:907 bus_for_each_drv+0x175/0x200 drivers/base/bus.c:429 __device_attach+0x29b/0x460 drivers/base/dd.c:979 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489 device_add+0xa00/0xfb0 drivers/base/core.c:3412 usb_new_device+0xd53/0x1640 drivers/usb/core/hub.c:2604 hub_port_connect drivers/usb/core/hub.c:5467 [inline] hub_port_connect_change drivers/usb/core/hub.c:5607 [inline] port_event drivers/usb/core/hub.c:5753 [inline] hub_event+0x295c/0x4fa0 drivers/usb/core/hub.c:5835 process_one_work+0x863/0x1000 kernel/workqueue.c:2310 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287