Extracting prog: 4m23.998715862s
Minimizing prog: 2h31m40.055751874s
Simplifying prog options: 10m23.379104619s
Extracting C: 3m48.225197331s
Simplifying C: 28m28.303660143s


extracting reproducer from 78 programs
testing a last program of every proc
single: executing 28 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-bpf$PROG_LOAD-openat$uhid-write$UHID_CREATE-write$UHID_DESTROY-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "4d79ab50be92b55a9f5bf53d04f92d867c4cdfbe6412d671af032bb0db2ca8515bf123b6549f1eac05f85f2912bf2f7ad27fb4d3c002b1fceaed65d06909bfd810b71fd40e867bfc2db839b60c9c4c4c9d02d929862791f216c17904cf14771164d48c57b0ef4ff14dd42a8e0ec90a140b9402baaa672626a9c8b133174b5b5f335a6f25fcb6689323b482263aac5a7257b867bdc025afea27919561d1bc188a21088a1bcd5d55c9e48f9813c7f32f69b705f39cc1432276cacd0a33db015cd419e95a49c610f948389b0f9a728fd2c40a9ed642a4edb212a80dd6627364f643e0179a9fb1d89d255ea0ebb491a99d89b4f83cc0cf5a8e2ced4eccbfca03"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r11, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r11, &(0x7f0000000080), 0x4) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in uhid_char_release
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-bpf$PROG_LOAD-openat$uhid-write$UHID_CREATE-write$UHID_DESTROY
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "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"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r11, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r11, &(0x7f0000000080), 0x4) (async)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-bpf$PROG_LOAD-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "4d79ab50be92b55a9f5bf53d04f92d867c4cdfbe6412d671af032bb0db2ca8515bf123b6549f1eac05f85f2912bf2f7ad27fb4d3c002b1fceaed65d06909bfd810b71fd40e867bfc2db839b60c9c4c4c9d02d929862791f216c17904cf14771164d48c57b0ef4ff14dd42a8e0ec90a140b9402baaa672626a9c8b133174b5b5f335a6f25fcb6689323b482263aac5a7257b867bdc025afea27919561d1bc188a21088a1bcd5d55c9e48f9813c7f32f69b705f39cc1432276cacd0a33db015cd419e95a49c610f948389b0f9a728fd2c40a9ed642a4edb212a80dd6627364f643e0179a9fb1d89d255ea0ebb491a99d89b4f83cc0cf5a8e2ced4eccbfca03"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r11, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-bpf$PROG_LOAD-openat$uhid
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "4d79ab50be92b55a9f5bf53d04f92d867c4cdfbe6412d671af032bb0db2ca8515bf123b6549f1eac05f85f2912bf2f7ad27fb4d3c002b1fceaed65d06909bfd810b71fd40e867bfc2db839b60c9c4c4c9d02d929862791f216c17904cf14771164d48c57b0ef4ff14dd42a8e0ec90a140b9402baaa672626a9c8b133174b5b5f335a6f25fcb6689323b482263aac5a7257b867bdc025afea27919561d1bc188a21088a1bcd5d55c9e48f9813c7f32f69b705f39cc1432276cacd0a33db015cd419e95a49c610f948389b0f9a728fd2c40a9ed642a4edb212a80dd6627364f643e0179a9fb1d89d255ea0ebb491a99d89b4f83cc0cf5a8e2ced4eccbfca03"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-bpf$PROG_LOAD
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "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"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "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"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0) (async)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "4d79ab50be92b55a9f5bf53d04f92d867c4cdfbe6412d671af032bb0db2ca8515bf123b6549f1eac05f85f2912bf2f7ad27fb4d3c002b1fceaed65d06909bfd810b71fd40e867bfc2db839b60c9c4c4c9d02d929862791f216c17904cf14771164d48c57b0ef4ff14dd42a8e0ec90a140b9402baaa672626a9c8b133174b5b5f335a6f25fcb6689323b482263aac5a7257b867bdc025afea27919561d1bc188a21088a1bcd5d55c9e48f9813c7f32f69b705f39cc1432276cacd0a33db015cd419e95a49c610f948389b0f9a728fd2c40a9ed642a4edb212a80dd6627364f643e0179a9fb1d89d255ea0ebb491a99d89b4f83cc0cf5a8e2ced4eccbfca03"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in corrupted
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open-syz_usb_connect
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "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"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm-mq_open
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "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"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) (async)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram-sendmsg$kcm
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000d200090009000000030000007f580000ff7f0000e2644785ba1f1f3fcb3e0881ac6a199163ca0ceecefa61114f0ef3079b2ad1f440fbdb02a02f33491a523e6eed062ef226a184cc1406447f04f22dad657b93ae501b34090eb79a0ebf01dc2a532f63ac0ffdfef34205e0b2ea5221a09a9783895d60f37744108ccb649c226fba7cbef6d9e43c8edfe8dfb9a9b2c51299295fc8523dc50d2c78f0053a422809b8375066c77799a64feb94538ff0486e08249c4bd7c0148576534f51d52d46d3d2743d22262587d86bac58f9e723e4f6d5781f97957a3c81b70b15248b4d5c370075fbe1b5033a33ba8b85e9615b314b7570b9a248111a5a0612b9fd07ef7e3b74ff5f5c2fe637043122641f1e9e1cff335bd1dcaed255d440c6e22de34dd009a56a62a13c7f1d2df0653d1504c50c8358eff07132d168fdf3986ef772c14321f030d5539a4984e1acbf4eea232437ac26efa3915208a530bf4426aa8b75ee989ac9bd47b47df2f5d822e2519119a4e9093a85f6adedeb3199963ed24243769cd9510822d618cde727b2ebe484829e174d1329154249"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="40b452a33e8216a659667715c7a120e190955597cdd982ecb7090ccf495743007bb4657365092c250d1152936987288056fa577f05cea83f19faa22d508e90c683aa181ff566e0ebf30f99809c627550d6ebb6c3515f456748fa1eeed3e98089", 0x60}, {&(0x7f00000001c0)="d15db2868771e8bd310c60623f814a0803aa0562b40755021e4e299e3cf634b18ac662a09a76153443f8ad406bef07fd89615ac0c89bd5d8d5349db76ffdc47755667f775927603b0706222c863504b4c81f586cbc34333b389f7a6724d082fa24af53c175631e84270ade06d02888c0d70f53da1c54fb0868c1b38f78d5d6922391ad73b419b570c4b4fb6adb60419ea535d38442f54d4ad92a2e6eb25c4f82c6556ec58fb5afad1d33fa263b5ace548cdc0c5058534a3f3132676fc73f998a575d55e59280eb67afdb", 0xca}, {&(0x7f00000002c0)="02e639f71812bc720a7f1f8ae005419cb01910ddb534d2d0944c0821bd382060d984a8c951497fd02185db22f3e032b46df43789b1a356d67cef42aebc8c70d5ad125d7b05be26e1cb996898ae328638abe160fe380438229bb56206a0099436d386fddb1d4d164031da4f2aa0457926c555", 0x72}, {&(0x7f0000000340)="b93579d1a99013d39ba154337b1bf8c93721cd9d6e4f95dbc578e37e78a1da5bb00a806e91b502129e3674a0d02ac115ba280978c200b2e9a7cf287d481e5a12f766db2315b9c818fa0cfb60ba509f5cb45e1bc025b1168a85664798d5e280bdc9f25db6dd21ff9dab44f417402439953a8c306c26ca4c883da082533485aee08e132a1d4107fea39f7685cc10c9c1b2479cb3225e0086bc5e4c19d3b28394397d2f61a04d6767f21f5fc8075ab31c563da8a51cc65c9eed8c9961142b28e64b68efd837989aa3c313c1c249c28c056334900ee089bf8c05ff8deb8a1385c38531e333f31d", 0xe5}], 0x4, &(0x7f0000000480)=[{0x30, 0x10c, 0xd2, "3de2b29431cf18e1eba6f341fe390950ca5aec8d16964f127b19cc3a2b"}, {0x110, 0x10a, 0x7ff, "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"}, {0xb0, 0x3a, 0xfffffffc, "53f06d29d3e1a17a5237d1318a2c1ef34d8e7c75b0db8e85b55118e1ffc83977500cc0e7afb3a62c793f3af786796ed7a63ed850d715aa56b738e94c91ac420fbe8907259c85dbd1daee41a1acf4ca91087eb29a8a15ed27f9b2e3aaf4b846f42960b0796fe5a2d37a8eb46128b24fa3367bfab68c11296e1e8c6996cd7ddfeec2c2bd2e7806acfe8f0fcd41bddb1aa9ad3ae96ed2813df21581591b77"}, {0xc8, 0x111, 0x81, "43174c39841f156ccc39951b27b418979306c6df8429746e6c80b9a7112595cc30f7fce86ff9cef4fa5cb345425558431b05a4443b1a799b2c362a7bbea95f37544344ce9efac44c2c8415a6d4c67000602c9806f329cfb0618d8214c6cf4f68fe019fe1262d43a3537d59b4e6676400841b0525a759f014254259a7b33cf45196956afe3dabec0c82dcd9c99a59996d7778434850d45a65bcd42862532e7691e25967c18143a50d12aed6699bd2547c2aadd3560793"}], 0x2b8}, 0x11)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS-openat$nvram
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup-io_uring_register$IORING_REGISTER_RESTRICTIONS
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
r8 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xc, 0x0, 0x0) (async)

program crashed: INFO: task hung in dev_attr_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write-io_uring_setup
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x800000})

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG-modify_ldt$write
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)
modify_ldt$write(0x1, &(0x7f00000009c0)={0x1, 0x20000800, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)

program crashed: INFO: task hung in corrupted
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_GUEST_DEBUG
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0xd0000, 0x0, [0xffffffffffffff80, 0x4, 0x8, 0x9, 0x81, 0x0, 0x1, 0x1df]}) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000d200090009000000030000007f580000ff7f0000e2644785ba1f1f3fcb3e0881ac6a199163ca0ceecefa61114f0ef3079b2ad1f440fbdb02a02f33491a523e6eed062ef226a184cc1406447f04f22dad657b93ae501b34090eb79a0ebf01dc2a532f63ac0ffdfef34205e0b2ea5221a09a9783895d60f37744108ccb649c226fba7cbef6d9e43c8edfe8dfb9a9b2c51299295fc8523dc50d2c78f0053a422809b8375066c77799a64feb94538ff0486e08249c4bd7c0148576534f51d52d46d3d2743d22262587d86bac58f9e723e4f6d5781f97957a3c81b70b15248b4d5c370075fbe1b5033a33ba8b85e9615b314b7570b9a248111a5a0612b9fd07ef7e3b74ff5f5c2fe637043122641f1e9e1cff335bd1dcaed255d440c6e22de34dd009a56a62a13c7f1d2df0653d1504c50c8358eff07132d168fdf3986ef772c14321f030d5539a4984e1acbf4eea232437ac26efa3915208a530bf4426aa8b75ee989ac9bd47b47df2f5d822e2519119a4e9093a85f6adedeb3199963ed24243769cd9510822d618cde727b2ebe484829e174d1329154249"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x8, 0x80, 0x0, 0x80000001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1, 0xa, 0x44, 0xff, 0xc, '\x00', 0x1, 0xfffffffffffffff7}) (async, rerun: 64)

program crashed: INFO: task hung in rcu_state
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000d200090009000000030000007f580000ff7f0000e2644785ba1f1f3fcb3e0881ac6a199163ca0ceecefa61114f0ef3079b2ad1f440fbdb02a02f33491a523e6eed062ef226a184cc1406447f04f22dad657b93ae501b34090eb79a0ebf01dc2a532f63ac0ffdfef34205e0b2ea5221a09a9783895d60f37744108ccb649c226fba7cbef6d9e43c8edfe8dfb9a9b2c51299295fc8523dc50d2c78f0053a422809b8375066c77799a64feb94538ff0486e08249c4bd7c0148576534f51d52d46d3d2743d22262587d86bac58f9e723e4f6d5781f97957a3c81b70b15248b4d5c370075fbe1b5033a33ba8b85e9615b314b7570b9a248111a5a0612b9fd07ef7e3b74ff5f5c2fe637043122641f1e9e1cff335bd1dcaed255d440c6e22de34dd009a56a62a13c7f1d2df0653d1504c50c8358eff07132d168fdf3986ef772c14321f030d5539a4984e1acbf4eea232437ac26efa3915208a530bf4426aa8b75ee989ac9bd47b47df2f5d822e2519119a4e9093a85f6adedeb3199963ed24243769cd9510822d618cde727b2ebe484829e174d1329154249"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm-openat$kvm
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r4, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-openat$uhid
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)

program did not crash
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-syz_usb_control_io-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program did not crash
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-syz_usb_connect-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESOCT], 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r3, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in syscall_exit_to_user_mode
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-quotactl_fd$Q_GETNEXTQUOTA-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xb7e6525166c1a1fe, r2, &(0x7f0000000b40))
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r3, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-getsockopt$inet_IP_IPSEC_POLICY-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1ea)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r2, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-write$UHID_CREATE2-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async)
write$UHID_CREATE2(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000d200090009000000030000007f580000ff7f0000e2644785ba1f1f3fcb3e0881ac6a199163ca0ceecefa61114f0ef3079b2ad1f440fbdb02a02f33491a523e6eed062ef226a184cc1406447f04f22dad657b93ae501b34090eb79a0ebf01dc2a532f63ac0ffdfef34205e0b2ea5221a09a9783895d60f37744108ccb649c226fba7cbef6d9e43c8edfe8dfb9a9b2c51299295fc8523dc50d2c78f0053a422809b8375066c77799a64feb94538ff0486e08249c4bd7c0148576534f51d52d46d3d2743d22262587d86bac58f9e723e4f6d5781f97957a3c81b70b15248b4d5c370075fbe1b5033a33ba8b85e9615b314b7570b9a248111a5a0612b9fd07ef7e3b74ff5f5c2fe637043122641f1e9e1cff335bd1dcaed255d440c6e22de34dd009a56a62a13c7f1d2df0653d1504c50c8358eff07132d168fdf3986ef772c14321f030d5539a4984e1acbf4eea232437ac26efa3915208a530bf4426aa8b75ee989ac9bd47b47df2f5d822e2519119a4e9093a85f6adedeb3199963ed24243769cd9510822d618cde727b2ebe484829e174d1329154249"], 0x1ea)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r2, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-setsockopt$inet_mreqn-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) (async)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$inet_dccp-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120) (async, rerun: 64)

program crashed: INFO: task hung in uhid_char_release
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120)

program crashed: INFO: task hung in uevent_show
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120)

program did not crash
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m24.072371197s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001c80)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000c80)=""/4096, 0x1000, 0x6, 0x3, 0x3, 0x7, 0x6}}, 0x120)

program crashed: INFO: task hung in uevent_show
extracting C reproducer
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: INFO: task hung in uhid_char_release
simplifying C reproducer
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: INFO: task hung in uhid_char_release
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: INFO: task hung in uhid_char_release
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: INFO: task hung in uhid_char_release
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: INFO: task hung in uhid_char_release
testing compiled C program (duration=6m24.072371197s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE
program crashed: INFO: task hung in uevent_show
reproducing took 3h20m7.63393561s
repro crashed as (corrupted=false):
INFO: task udevd:5223 blocked for more than 143 seconds.
      Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:23904 pid:5223  tgid:5223  ppid:1      flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x7e7/0xee0 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2736
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2430
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x991/0xb70 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f91c7516b6a
RSP: 002b:00007fff13005828 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000555ae111cb50 RCX: 00007f91c7516b6a
RDX: 0000000000001000 RSI: 0000555ae1166c50 RDI: 000000000000000c
RBP: 0000555ae111cb50 R08: 000000000000000c R09: 0000000000000400
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fff13005d08 R15: 000000000000000a
 </TASK>
INFO: task syz-executor233:5894 blocked for more than 145 seconds.
      Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor233 state:D stack:26752 pid:5894  tgid:5894  ppid:5865   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_timeout+0xb0/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xa37/0xc50 kernel/workqueue.c:4231
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4351
 uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
 uhid_char_release+0xac/0x600 drivers/hid/uhid.c:662
 __fput+0x23c/0xa50 fs/file_table.c:450
 task_work_run+0x24f/0x310 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xa2f/0x28e0 kernel/exit.c:938
 do_group_exit+0x207/0x2c0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1096
 x64_sys_call+0x26a8/0x26b0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f67d9e65cb9
RSP: 002b:00007ffcfb3092f8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67d9e65cb9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f67d9ee0290 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67d9ee0290
R13: 0000000000000000 R14: 00007f67d9ee0d00 R15: 00007f67d9e36e70
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/0:0/8:
1 lock held by khungtaskd/30:
 #0: 
ffffffff8e93c520
 (
rcu_read_lock){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6744
3 locks held by kworker/1:1/46:
3 locks held by kworker/1:2/971:
5 locks held by kworker/u8:7/2968:
4 locks held by udevd/5223:
 #0: ffff88802f6f52f0 (
&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88805cf64488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff888033dfb2d8 (kn->active
#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888021fd1a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1014 [inline]
 #3: ffff888021fd1a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2736
2 locks held by getty/5603:
 #0: ffff888034d2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900032e32f0
 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211
3 locks held by kworker/0:4/5884:
3 locks held by kworker/1:3/5885:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xff4/0x1040 kernel/hung_task.c:379
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5885 Comm: kworker/1:3 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events uhid_device_add_worker
RIP: 0010:io_serial_out+0x7e/0xc0 drivers/tty/serial/8250/8250_port.c:416
Code: fc 89 e9 41 d3 e7 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 6c 30 bd fc 44 03 3b 44 89 f0 44 89 fa ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c a7
RSP: 0018:ffffc900042d6c50 EFLAGS: 00000006
RAX: 0000000000000000 RBX: ffffffff9a739a60 RCX: 0000000000000000
RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020
RBP: 0000000000000000 R08: ffffffff8543919b R09: fffff5200085ad6c
R10: dffffc0000000000 R11: ffffffff85439150 R12: dffffc0000000000
R13: 1ffff9200085ada8 R14: 0000000000000000 R15: 00000000000003f9
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055556583a6f8 CR3: 0000000031c64000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 serial8250_console_write+0x54e/0x1ed0 drivers/tty/serial/8250/8250_port.c:3377
 console_emit_next_record kernel/printk/printk.c:3122 [inline]
 console_flush_all+0x869/0xeb0 kernel/printk/printk.c:3210
 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline]
 console_unlock+0x14f/0x3b0 kernel/printk/printk.c:3309
 vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2432
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4942
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4953
 _dev_warn+0x122/0x170 drivers/base/core.c:5009
 hid_parser_main+0x71f/0xaa0 drivers/hid/hid-core.c:660
 hid_open_report+0xbd8/0x1580 drivers/hid/hid-core.c:1322
 hid_parse include/linux/hid.h:1123 [inline]
 hid_generic_probe+0x3d/0x90 drivers/hid/hid-generic.c:66
 __hid_device_probe drivers/hid/hid-core.c:2725 [inline]
 hid_device_probe+0x3ad/0x790 drivers/hid/hid-core.c:2762
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3672
 hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2908
 uhid_device_add_worker+0x44/0xf0 drivers/hid/uhid.c:73
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.061 msecs

final repro crashed as (corrupted=false):
INFO: task udevd:5223 blocked for more than 143 seconds.
      Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:23904 pid:5223  tgid:5223  ppid:1      flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x7e7/0xee0 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2736
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2430
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x991/0xb70 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f91c7516b6a
RSP: 002b:00007fff13005828 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000555ae111cb50 RCX: 00007f91c7516b6a
RDX: 0000000000001000 RSI: 0000555ae1166c50 RDI: 000000000000000c
RBP: 0000555ae111cb50 R08: 000000000000000c R09: 0000000000000400
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fff13005d08 R15: 000000000000000a
 </TASK>
INFO: task syz-executor233:5894 blocked for more than 145 seconds.
      Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor233 state:D stack:26752 pid:5894  tgid:5894  ppid:5865   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_timeout+0xb0/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xa37/0xc50 kernel/workqueue.c:4231
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4351
 uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
 uhid_char_release+0xac/0x600 drivers/hid/uhid.c:662
 __fput+0x23c/0xa50 fs/file_table.c:450
 task_work_run+0x24f/0x310 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xa2f/0x28e0 kernel/exit.c:938
 do_group_exit+0x207/0x2c0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1096
 x64_sys_call+0x26a8/0x26b0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f67d9e65cb9
RSP: 002b:00007ffcfb3092f8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67d9e65cb9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f67d9ee0290 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67d9ee0290
R13: 0000000000000000 R14: 00007f67d9ee0d00 R15: 00007f67d9e36e70
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/0:0/8:
1 lock held by khungtaskd/30:
 #0: 
ffffffff8e93c520
 (
rcu_read_lock){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6744
3 locks held by kworker/1:1/46:
3 locks held by kworker/1:2/971:
5 locks held by kworker/u8:7/2968:
4 locks held by udevd/5223:
 #0: ffff88802f6f52f0 (
&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88805cf64488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff888033dfb2d8 (kn->active
#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888021fd1a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1014 [inline]
 #3: ffff888021fd1a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2736
2 locks held by getty/5603:
 #0: ffff888034d2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900032e32f0
 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211
3 locks held by kworker/0:4/5884:
3 locks held by kworker/1:3/5885:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xff4/0x1040 kernel/hung_task.c:379
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5885 Comm: kworker/1:3 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events uhid_device_add_worker
RIP: 0010:io_serial_out+0x7e/0xc0 drivers/tty/serial/8250/8250_port.c:416
Code: fc 89 e9 41 d3 e7 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 6c 30 bd fc 44 03 3b 44 89 f0 44 89 fa ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c a7
RSP: 0018:ffffc900042d6c50 EFLAGS: 00000006
RAX: 0000000000000000 RBX: ffffffff9a739a60 RCX: 0000000000000000
RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020
RBP: 0000000000000000 R08: ffffffff8543919b R09: fffff5200085ad6c
R10: dffffc0000000000 R11: ffffffff85439150 R12: dffffc0000000000
R13: 1ffff9200085ada8 R14: 0000000000000000 R15: 00000000000003f9
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055556583a6f8 CR3: 0000000031c64000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 serial8250_console_write+0x54e/0x1ed0 drivers/tty/serial/8250/8250_port.c:3377
 console_emit_next_record kernel/printk/printk.c:3122 [inline]
 console_flush_all+0x869/0xeb0 kernel/printk/printk.c:3210
 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline]
 console_unlock+0x14f/0x3b0 kernel/printk/printk.c:3309
 vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2432
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4942
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4953
 _dev_warn+0x122/0x170 drivers/base/core.c:5009
 hid_parser_main+0x71f/0xaa0 drivers/hid/hid-core.c:660
 hid_open_report+0xbd8/0x1580 drivers/hid/hid-core.c:1322
 hid_parse include/linux/hid.h:1123 [inline]
 hid_generic_probe+0x3d/0x90 drivers/hid/hid-generic.c:66
 __hid_device_probe drivers/hid/hid-core.c:2725 [inline]
 hid_device_probe+0x3ad/0x790 drivers/hid/hid-core.c:2762
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3672
 hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2908
 uhid_device_add_worker+0x44/0xf0 drivers/hid/uhid.c:73
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.061 msecs