Extracting prog: 12m13.894411271s
Minimizing prog: 2h26m5.272085042s
Simplifying prog options: 0s
Extracting C: 3m35.551680953s
Simplifying C: 23m46.260519266s


extracting reproducer from 35 programs
testing a last program of every proc
single: executing 10 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8b, 0x73, 0x28, 0x40, 0xdb8, 0x7d30, 0x454, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0x2, 0x2, 0x5}}]}}]}}, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xb, 0x73, "0eb3db8ebe05b1e91e7b9aa48928f0c4ef02863cca4039f5ad6f4e69297ce1a593c82b1298596904d0eabe9fecc17e4369422cb26a4317893cc314d365b259788decca7a9b5e224244e9f926520b28ef7cceb87bc1b0f4990cf6e089e2beffadf49113df09813f78affe9d70ce4a509af79190"}, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-read$char_usb-write$char_usb-syz_usb_connect
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
read$char_usb(r3, 0x0, 0x0)
write$char_usb(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d645101020301090242000102000000090401000000068f000a2401020001020102052404"], 0x0)

program crashed: INFO: task hung in kernfs_dop_revalidate
single: successfully extracted reproducer
found reproducer with 24 syscalls
minimizing guilty program
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-read$char_usb-write$char_usb
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
read$char_usb(r3, 0x0, 0x0)
write$char_usb(r3, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-read$char_usb
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
read$char_usb(r3, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_usb_connect-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x76, 0x65, 0x1d, 0x8, 0x4b4, 0x5500, 0x464c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x9, 0x60, 0xd, [{{0x9, 0x4, 0xb7, 0x7, 0x1, 0x4d, 0x6f, 0x2, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0xb3}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_disconnect-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-ioctl$EVIOCSMASK-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSMASK(r2, 0x80004507, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_open_dev$evdev-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-ioctl$EVIOCSMASK-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCSREP-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000007c0)=[0x3, 0x21])
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
extracting C reproducer
testing compiled C program (duration=6m51.821796517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: INFO: rcu detected stall in corrupted
simplifying C reproducer
testing compiled C program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing compiled C program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=6m51.821796517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_open_dev$char_usb-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_connect(0x6, 0x86e, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program crashed: INFO: task hung in synchronize_rcu
validation run: crashed=true
reproducing took 3h25m41.895659902s
repro crashed as (corrupted=false):
INFO: task kworker/u8:7:1602 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc7-syzkaller-g51d4b0a44c82 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:7    state:D
 stack:23736 pid:1602  tgid:1602  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events_unbound fsnotify_mark_destroy_workfn

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x1325/0x3b10 kernel/sched/core.c:6786
 __schedule_loop kernel/sched/core.c:6864 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6879
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common+0x2ff/0x4e0 kernel/sched/completion.c:116
 __synchronize_srcu+0x1b3/0x290 kernel/rcu/srcutree.c:1442
 fsnotify_mark_destroy_workfn+0x112/0x350 fs/notify/mark.c:996
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5b3/0x6c0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/9:
4 locks held by kworker/0:1/10:
5 locks held by ksoftirqd/0/14:
1 lock held by khungtaskd/30:
 #0: 
ffffffff890c8440
 (
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6770
7 locks held by kworker/0:2/349:
7 locks held by kworker/1:2/912:
 #0: 
ffff8881072ab148
 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: 
ffffc9000189fd10
 (
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: 
ffff88810af77198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:884 [inline]
, at: hub_event+0x1be/0x5060 drivers/usb/core/hub.c:5898
 #3: 
ffff88811c5a6198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:884 [inline]
, at: __device_attach+0x7e/0x4b0 drivers/base/dd.c:1004
 #4: 
ffff888119533160
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:884 [inline]
, at: __device_attach+0x7e/0x4b0 drivers/base/dd.c:1004
 #5: 
ffff888119534088
 (
&ictx->lock
){+.+.}-{4:4}
, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
, at: imon_probe+0x9e2/0x3ac0 drivers/media/rc/imon.c:2434
 #6: 
ffffffff89e0dd28
 (
input_mutex
){+.+.}-{4:4}
, at: class_mutex_intr_constructor include/linux/mutex.h:227 [inline]
, at: input_register_device+0x98a/0x1130 drivers/input/input.c:2408
2 locks held by kworker/u8:7/1602:
2 locks held by kworker/u8:8/1608:
2 locks held by getty/2905:
 #0: 
ffff88811235e0a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900000432f0
 (
&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222
4 locks held by udevd/5797:
 #0: 
ffff88813169d668
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182
 #1: 
ffff88811b36dc88
 (
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff8881149df008
 (
kn->active
#9
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff888107b34198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:889 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
5 locks held by kworker/0:3/5814:
1 lock held by udevd/5823:
 #0: 
ffffffff890d3a38
 (
rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock+0x1a3/0x3c0 kernel/rcu/tree_exp.h:336
1 lock held by udevd/5839:
 #0: 
ffffffff890d3a38
 (
rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock+0x284/0x3c0 kernel/rcu/tree_exp.h:304
4 locks held by udevd/5841:
 #0: 
ffff888124339668
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182
 #1: 
ffff8881086db888
 (
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811472f008
 (
kn->active
#9
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff888114437198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:889 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/5842:
 #0: 
ffff88812767f790
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182
 #1: 
ffff88811b199888
 (
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff8881135ecd28
 (
kn->active
#9
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c5a6198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:889 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-g51d4b0a44c82 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]
 watchdog+0xf70/0x12c0 kernel/hung_task.c:470
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5b3/0x6c0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-g51d4b0a44c82 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:416
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 46 87 5c 04 e8 c1 1e 05 ff eb a0 e8 4a 1f 05
RSP: 0018:ffffc900000ef340 EFLAGS: 00000002
RAX: 0000000000000033 RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff82d57865 RDI: ffffffff9392af80
RBP: ffffffff9392af40 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000033 R14: ffffffff9392af40 R15: ffffffff82d57800
FS:  0000000000000000(0000) GS:ffff888269160000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f895b690254 CR3: 0000000111dda000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 serial_port_out include/linux/serial_core.h:798 [inline]
 serial8250_console_putchar drivers/tty/serial/8250/8250_port.c:3306 [inline]
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3378 [inline]
 serial8250_console_write+0xfbc/0x1890 drivers/tty/serial/8250/8250_port.c:3456
 console_emit_next_record kernel/printk/printk.c:3138 [inline]
 console_flush_all+0x801/0xc60 kernel/printk/printk.c:3226
 __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
 console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
 vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
 dev_vprintk_emit drivers/base/core.c:4917 [inline]
 dev_printk_emit+0xfa/0x140 drivers/base/core.c:4928
 __dev_printk+0xf5/0x270 drivers/base/core.c:4940
 _dev_warn+0xe4/0x120 drivers/base/core.c:4984
 usb_rx_callback_intf0+0x11c/0x1a0 drivers/media/rc/imon.c:1768
 __usb_hcd_giveback_urb+0x38d/0x6e0 drivers/usb/core/hcd.c:1663
 usb_hcd_giveback_urb+0x39b/0x450 drivers/usb/core/hcd.c:1747
 dummy_timer+0x1814/0x3a30 drivers/usb/gadget/udc/dummy_hcd.c:1995
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x1ff/0xad0 kernel/time/hrtimer.c:1825
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1842
 handle_softirqs+0x208/0x8d0 kernel/softirq.c:579
 run_ksoftirqd kernel/softirq.c:968 [inline]
 run_ksoftirqd+0x3a/0x60 kernel/softirq.c:960
 smpboot_thread_fn+0x3f4/0xae0 kernel/smpboot.c:164
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5b3/0x6c0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
INFO: task kworker/u8:7:1602 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc7-syzkaller-g51d4b0a44c82 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:7    state:D
 stack:23736 pid:1602  tgid:1602  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events_unbound fsnotify_mark_destroy_workfn

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x1325/0x3b10 kernel/sched/core.c:6786
 __schedule_loop kernel/sched/core.c:6864 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6879
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common+0x2ff/0x4e0 kernel/sched/completion.c:116
 __synchronize_srcu+0x1b3/0x290 kernel/rcu/srcutree.c:1442
 fsnotify_mark_destroy_workfn+0x112/0x350 fs/notify/mark.c:996
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5b3/0x6c0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/9:
4 locks held by kworker/0:1/10:
5 locks held by ksoftirqd/0/14:
1 lock held by khungtaskd/30:
 #0: 
ffffffff890c8440
 (
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6770
7 locks held by kworker/0:2/349:
7 locks held by kworker/1:2/912:
 #0: 
ffff8881072ab148
 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: 
ffffc9000189fd10
 (
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: 
ffff88810af77198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:884 [inline]
, at: hub_event+0x1be/0x5060 drivers/usb/core/hub.c:5898
 #3: 
ffff88811c5a6198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:884 [inline]
, at: __device_attach+0x7e/0x4b0 drivers/base/dd.c:1004
 #4: 
ffff888119533160
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:884 [inline]
, at: __device_attach+0x7e/0x4b0 drivers/base/dd.c:1004
 #5: 
ffff888119534088
 (
&ictx->lock
){+.+.}-{4:4}
, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
, at: imon_probe+0x9e2/0x3ac0 drivers/media/rc/imon.c:2434
 #6: 
ffffffff89e0dd28
 (
input_mutex
){+.+.}-{4:4}
, at: class_mutex_intr_constructor include/linux/mutex.h:227 [inline]
, at: input_register_device+0x98a/0x1130 drivers/input/input.c:2408
2 locks held by kworker/u8:7/1602:
2 locks held by kworker/u8:8/1608:
2 locks held by getty/2905:
 #0: 
ffff88811235e0a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900000432f0
 (
&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222
4 locks held by udevd/5797:
 #0: 
ffff88813169d668
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182
 #1: 
ffff88811b36dc88
 (
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff8881149df008
 (
kn->active
#9
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff888107b34198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:889 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
5 locks held by kworker/0:3/5814:
1 lock held by udevd/5823:
 #0: 
ffffffff890d3a38
 (
rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock+0x1a3/0x3c0 kernel/rcu/tree_exp.h:336
1 lock held by udevd/5839:
 #0: 
ffffffff890d3a38
 (
rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock+0x284/0x3c0 kernel/rcu/tree_exp.h:304
4 locks held by udevd/5841:
 #0: 
ffff888124339668
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182
 #1: 
ffff8881086db888
 (
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811472f008
 (
kn->active
#9
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff888114437198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:889 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/5842:
 #0: 
ffff88812767f790
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12c0 fs/seq_file.c:182
 #1: 
ffff88811b199888
 (
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff8881135ecd28
 (
kn->active
#9
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c5a6198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:889 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-g51d4b0a44c82 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]
 watchdog+0xf70/0x12c0 kernel/hung_task.c:470
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5b3/0x6c0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-g51d4b0a44c82 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:416
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 46 87 5c 04 e8 c1 1e 05 ff eb a0 e8 4a 1f 05
RSP: 0018:ffffc900000ef340 EFLAGS: 00000002
RAX: 0000000000000033 RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff82d57865 RDI: ffffffff9392af80
RBP: ffffffff9392af40 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000033 R14: ffffffff9392af40 R15: ffffffff82d57800
FS:  0000000000000000(0000) GS:ffff888269160000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f895b690254 CR3: 0000000111dda000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 serial_port_out include/linux/serial_core.h:798 [inline]
 serial8250_console_putchar drivers/tty/serial/8250/8250_port.c:3306 [inline]
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3378 [inline]
 serial8250_console_write+0xfbc/0x1890 drivers/tty/serial/8250/8250_port.c:3456
 console_emit_next_record kernel/printk/printk.c:3138 [inline]
 console_flush_all+0x801/0xc60 kernel/printk/printk.c:3226
 __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
 console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
 vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
 dev_vprintk_emit drivers/base/core.c:4917 [inline]
 dev_printk_emit+0xfa/0x140 drivers/base/core.c:4928
 __dev_printk+0xf5/0x270 drivers/base/core.c:4940
 _dev_warn+0xe4/0x120 drivers/base/core.c:4984
 usb_rx_callback_intf0+0x11c/0x1a0 drivers/media/rc/imon.c:1768
 __usb_hcd_giveback_urb+0x38d/0x6e0 drivers/usb/core/hcd.c:1663
 usb_hcd_giveback_urb+0x39b/0x450 drivers/usb/core/hcd.c:1747
 dummy_timer+0x1814/0x3a30 drivers/usb/gadget/udc/dummy_hcd.c:1995
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x1ff/0xad0 kernel/time/hrtimer.c:1825
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1842
 handle_softirqs+0x208/0x8d0 kernel/softirq.c:579
 run_ksoftirqd kernel/softirq.c:968 [inline]
 run_ksoftirqd+0x3a/0x60 kernel/softirq.c:960
 smpboot_thread_fn+0x3f4/0xae0 kernel/smpboot.c:164
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5b3/0x6c0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>