Extracting prog: 1m38.967977164s
Minimizing prog: 42m8.268758685s
Simplifying prog options: 0s
Extracting C: 2m19.639179689s
Simplifying C: 17m4.759114452s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
single: successfully extracted reproducer
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, 0x0, 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xb5, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x0, 0x0, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, 0x0}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(0x0, 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
validation run: crashed=true
reproducing took 1h10m26.933987366s
repro crashed as (corrupted=false):
usb 1-1: BOGUS urb xfer, pipe 0 != type 1
------------[ cut here ]------------
usb 1-1: BOGUS urb flags, 202 --> 200
WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0 drivers/usb/core/urb.c:532, CPU#1: syz.0.17/5856
Modules linked in:
CPU: 1 UID: 0 PID: 5856 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:usb_submit_urb+0xd28/0x18b0 drivers/usb/core/urb.c:532
Code: e8 7d 79 c9 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 80 2b b0 8f e8 9f
RSP: 0018:ffffc90003447918 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888075636400 RCX: 0000000000000202
RDX: ffff88802b2ed020 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfb0
RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff1100eac6c8b
R13: ffff88802b2ed020 R14: ffff888031879100 R15: 0000000000000200
FS:  0000000000000000(0000) GS:ffff888124dd2000(0063) knlGS:00000000571d4480
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000557bc126bb18 CR3: 000000007579a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ttusb_start_iso_xfer drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:829 [inline]
 ttusb_start_feed+0xe19/0x1770 drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:899
 dmx_ts_feed_start_filtering+0x129/0x220 drivers/media/dvb-core/dvb_demux.c:747
 dvb_dmxdev_start_feed drivers/media/dvb-core/dmxdev.c:658 [inline]
 dvb_dmxdev_filter_start+0x434/0x10d0 drivers/media/dvb-core/dmxdev.c:769
 dvb_demux_do_ioctl+0x48b/0x540 drivers/media/dvb-core/dmxdev.c:1099
 dvb_usercopy+0x199/0x2e0 drivers/media/dvb-core/dvbdev.c:996
 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1208
 __do_compat_sys_ioctl fs/ioctl.c:695 [inline]
 __se_compat_sys_ioctl fs/ioctl.c:638 [inline]
 __ia32_compat_sys_ioctl+0x5ea/0x950 fs/ioctl.c:638
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x27a/0x6a0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf707f0ec
Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
RSP: 002b:00000000fffcedac EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040146f2c
RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	e8 7d 79 c9 fa       	call   0xfac97982
   5:	4c 89 f7             	mov    %r14,%rdi
   8:	4d 8b 6d 00          	mov    0x0(%r13),%r13
   c:	41 0f b6 04 2c       	movzbl (%r12,%rbp,1),%eax
  11:	84 c0                	test   %al,%al
  13:	48 8b 54 24 18       	mov    0x18(%rsp),%rdx
  18:	0f 85 97 07 00 00    	jne    0x7b5
  1e:	8b 0a                	mov    (%rdx),%ecx
  20:	48 8b 34 24          	mov    (%rsp),%rsi
  24:	4c 89 ea             	mov    %r13,%rdx
  27:	45 89 f8             	mov    %r15d,%r8d
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	4c 8b 6c 24 08       	mov    0x8(%rsp),%r13
  34:	4c 89 ef             	mov    %r13,%rdi
  37:	48 c7 c6 80 2b b0 8f 	mov    $0xffffffff8fb02b80,%rsi
  3e:	e8                   	.byte 0xe8
  3f:	9f                   	lahf

final repro crashed as (corrupted=false):
usb 1-1: BOGUS urb xfer, pipe 0 != type 1
------------[ cut here ]------------
usb 1-1: BOGUS urb flags, 202 --> 200
WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0 drivers/usb/core/urb.c:532, CPU#1: syz.0.17/5856
Modules linked in:
CPU: 1 UID: 0 PID: 5856 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:usb_submit_urb+0xd28/0x18b0 drivers/usb/core/urb.c:532
Code: e8 7d 79 c9 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 80 2b b0 8f e8 9f
RSP: 0018:ffffc90003447918 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888075636400 RCX: 0000000000000202
RDX: ffff88802b2ed020 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfb0
RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff1100eac6c8b
R13: ffff88802b2ed020 R14: ffff888031879100 R15: 0000000000000200
FS:  0000000000000000(0000) GS:ffff888124dd2000(0063) knlGS:00000000571d4480
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000557bc126bb18 CR3: 000000007579a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ttusb_start_iso_xfer drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:829 [inline]
 ttusb_start_feed+0xe19/0x1770 drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:899
 dmx_ts_feed_start_filtering+0x129/0x220 drivers/media/dvb-core/dvb_demux.c:747
 dvb_dmxdev_start_feed drivers/media/dvb-core/dmxdev.c:658 [inline]
 dvb_dmxdev_filter_start+0x434/0x10d0 drivers/media/dvb-core/dmxdev.c:769
 dvb_demux_do_ioctl+0x48b/0x540 drivers/media/dvb-core/dmxdev.c:1099
 dvb_usercopy+0x199/0x2e0 drivers/media/dvb-core/dvbdev.c:996
 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1208
 __do_compat_sys_ioctl fs/ioctl.c:695 [inline]
 __se_compat_sys_ioctl fs/ioctl.c:638 [inline]
 __ia32_compat_sys_ioctl+0x5ea/0x950 fs/ioctl.c:638
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x27a/0x6a0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf707f0ec
Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
RSP: 002b:00000000fffcedac EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040146f2c
RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	e8 7d 79 c9 fa       	call   0xfac97982
   5:	4c 89 f7             	mov    %r14,%rdi
   8:	4d 8b 6d 00          	mov    0x0(%r13),%r13
   c:	41 0f b6 04 2c       	movzbl (%r12,%rbp,1),%eax
  11:	84 c0                	test   %al,%al
  13:	48 8b 54 24 18       	mov    0x18(%rsp),%rdx
  18:	0f 85 97 07 00 00    	jne    0x7b5
  1e:	8b 0a                	mov    (%rdx),%ecx
  20:	48 8b 34 24          	mov    (%rsp),%rsi
  24:	4c 89 ea             	mov    %r13,%rdx
  27:	45 89 f8             	mov    %r15d,%r8d
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	4c 8b 6c 24 08       	mov    0x8(%rsp),%r13
  34:	4c 89 ef             	mov    %r13,%rdi
  37:	48 c7 c6 80 2b b0 8f 	mov    $0xffffffff8fb02b80,%rsi
  3e:	e8                   	.byte 0xe8
  3f:	9f                   	lahf