Extracting prog: 1h38m2.126357239s
Minimizing prog: 14m53.985898895s
Simplifying prog options: 14m54.903664087s
Extracting C: 5m13.722756032s
Simplifying C: 0s


extracting reproducer from 35 programs
testing a last program of every proc
single: executing 10 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm
detailed listing:
executing program 0:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm
detailed listing:
executing program 0:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 35 programs with base timeout 6m0s
testing program (duration=6m8s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
detailed listing:
executing program 3:
syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c}}]}}, 0x0)
executing program 1:
syz_usb_connect(0x3, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xec, 0xe1, 0x6, 0x20, 0xbda, 0x139, 0x1432, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0x0, 0x7f, "", [{{0x9, 0x4, 0x28, 0xe, 0x0, 0x87, 0xd6, 0x4a}}]}}]}}, 0x0)
executing program 0:
syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x40, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3e, 0x99, 0x7, {0xa, 0x25, 0x25, 0x7ff, 0x30, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xa, 0x5, {0xa, 0x25, 0x25, 0x0, 0xf, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2828}}, {0x0, 0x0}, {0x1b, &(0x7f0000000340)=@string={0x1b, 0x3, "3ba195d83232ecd172914a28ce29a2c13d67fd7b7218b0d378"}}]})
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x210, 0x18, 0x71, 0xed, 0x40, 0x50d, 0x2102, 0xb747, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
executing program 3:
syz_usb_connect(0x5, 0x107, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000082b509081304256036c3010203010902f50002000000000904"], 0x0)
executing program 1:
syz_usb_connect$uac3(0x0, 0x98, &(0x7f00000007c0)=ANY=[@ANYBLOB="120110030000000835121482400001020301090286000301034007080b0002010130010904000000010130000a2401062200ff070000132403040101010305030000008100096af04021240c03"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904"], 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x1b, 0xf5, 0xf7, 0x8, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xb, 0x80, 0x5, "", [{{0x9, 0x4, 0xaf, 0x9, 0x0, 0x8, 0x6, 0x1, 0x2}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x4f, 0xf9, 0x1, {0x22, 0xf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x7, 0x40}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x81, &(0x7f0000000280)=@string={0x81, 0x3, "9ac0a8c0c813172688c8c74d4c9911f859b42d40bba6d9e89b52c519d315e8acc56bb58f084b83fdc342b6f7a00d96cd29afac3d72d56dc9b88b69a56760c1b63fcbba9f3dd7bff606a70ccfd2dcbc6f68bfb05fc525a66f71b66fd89a989b18e6ed68d27877afc1d7f3d63a7b6ec533a1c500f626680528e3bbedd85ddc23"}}]})
executing program 3:
syz_usb_connect$uac2(0x0, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000408205590140000102030109028b00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d02008b002009040100000102200009040101010102080006240201033e10240105c40300000000030d000000cd090501090800000c1d08250183"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
executing program 1:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010200b8e42d08da05990082d50102030109022d00010007000009040200030456fb00090502000000000000090506c2000000000009055dc6"], 0x0)
executing program 0:
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d21534081e040c409c1d01020301090212000100000000090400"], 0x0)
executing program 2:
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b02010103200809040000000101200009240100800909000909040100000102200009040101010102200009050109100032000908250102300001000904020000010220000904020101010220"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0)
executing program 3:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff0000", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x22, 0x1000}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x1, 0x6, 0x0, 0x2000004, 0x5, 0x4, 0xa}, @extension_unit={0x5, 0x24, 0xa, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x3, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0)
executing program 1:
syz_usb_connect(0x2, 0x46, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x53, 0x4f, 0xfb, 0x8, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x74, 0xf, 0x3, 0xf2, 0xb7, 0x5e, 0x80, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040cf1090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
executing program 4:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x2, 0x0}]})
executing program 3:
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)
executing program 1:
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x37, 0x34, 0xe7, 0x40, 0x10d2, 0x1ca9, 0x72e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xc, 0x0, 0x20, "", [{{0x9, 0x4, 0x9d, 0x8, 0x0, 0xa9, 0x4d, 0x75, 0x7f}}]}}]}}, 0x0)
executing program 4:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)
executing program 3:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
executing program 1:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
executing program 32:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)
executing program 33:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)
executing program 34:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
executing program 35:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)
executing program 36:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
bisect: bisecting 35 programs
bisect: split chunks (needed=false): <35>
bisect: split chunk #0 of len 35 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d21534081e040c409c1d01020301090212000100000000090400"], 0x0)
executing program 2:
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b02010103200809040000000101200009240100800909000909040100000102200009040101010102200009050109100032000908250102300001000904020000010220000904020101010220"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0)
executing program 3:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff0000", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x22, 0x1000}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x1, 0x6, 0x0, 0x2000004, 0x5, 0x4, 0xa}, @extension_unit={0x5, 0x24, 0xa, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x3, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0)
executing program 1:
syz_usb_connect(0x2, 0x46, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x53, 0x4f, 0xfb, 0x8, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x74, 0xf, 0x3, 0xf2, 0xb7, 0x5e, 0x80, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040cf1090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
executing program 4:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x2, 0x0}]})
executing program 3:
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)
executing program 1:
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x37, 0x34, 0xe7, 0x40, 0x10d2, 0x1ca9, 0x72e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xc, 0x0, 0x20, "", [{{0x9, 0x4, 0x9d, 0x8, 0x0, 0xa9, 0x4d, 0x75, 0x7f}}]}}]}}, 0x0)
executing program 4:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)
executing program 3:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
executing program 1:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
executing program 32:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)
executing program 33:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)
executing program 34:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
executing program 35:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)
executing program 36:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
detailed listing:
executing program 1:
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x37, 0x34, 0xe7, 0x40, 0x10d2, 0x1ca9, 0x72e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xc, 0x0, 0x20, "", [{{0x9, 0x4, 0x9d, 0x8, 0x0, 0xa9, 0x4d, 0x75, 0x7f}}]}}]}}, 0x0)
executing program 4:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)
executing program 3:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
executing program 1:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
executing program 32:
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009008103200000000009058202080000000009050302"], 0x0)
executing program 33:
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cadd908ce0a112025a70000000109023600010000000009046d000429b1d8000905d2a644bb059d06090505b2"], 0x0)
executing program 34:
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000004035121c8240000102030109026000030101005c0904000000010100000a2401f97b0a00020102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
executing program 35:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ff000000000009050f"], 0x0)
executing program 36:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x3, 0xeb, 0xb6, 0x10, 0xb3b, 0x1612, 0x15d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa6, 0xc, 0x0, 0x33, 0xe7, 0x5f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
detailed listing:
executing program 0:
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d21534081e040c409c1d01020301090212000100000000090400"], 0x0)
executing program 2:
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b02010103200809040000000101200009240100800909000909040100000102200009040101010102200009050109100032000908250102300001000904020000010220000904020101010220"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0)
executing program 3:
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff0000", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x22, 0x1000}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x1, 0x6, 0x0, 0x2000004, 0x5, 0x4, 0xa}, @extension_unit={0x5, 0x24, 0xa, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x3, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0)
executing program 1:
syz_usb_connect(0x2, 0x46, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x53, 0x4f, 0xfb, 0x8, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x74, 0xf, 0x3, 0xf2, 0xb7, 0x5e, 0x80, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040cf1090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
executing program 4:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x2, 0x0}]})
executing program 3:
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in hub_event
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <12>
bisect: split chunk #0 of len 12 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 1, 1, 1]
detailed listing:
executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040cf1090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
executing program 4:
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x2, 0x0}]})
executing program 3:
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: task hung in kernfs_notify_workfn
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <6>
bisect: split chunk #0 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1]
detailed listing:
executing program 3:
syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 2:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
bisect: concatenation succeeded
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)

program did not crash
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=7m20.032906456s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program did not crash
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program did not crash
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
reproducing took 2h26m16.837822094s
repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 0, t=10502 jiffies, g=28045, q=7056 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 1458 (4294983281-4294981823), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 1458 jiffies! g28045 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R
  running task    
 stack:27752 pid:15    tgid:15    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x1325/0x47d0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0xdd/0x2c0 kernel/sched/core.c:7326
 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 5756 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:csd_lock_wait kernel/smp.c:342 [inline]
RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 kernel/smp.c:892
Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 99 73 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31
RSP: 0018:ffffc900015df558 EFLAGS: 00000293

RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81a77d0d
RDX: ffff888122733c00 RSI: ffffffff81a77ce7 RDI: ffff888122733c00
RBP: ffff8881f573ee80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
R13: ffffed103eae7dd1 R14: 0000000000000001 R15: ffff8881f563a980
FS:  0000000000000000(0000) GS:ffff88826863a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000013f7a70cf010 CR3: 00000000094ac000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1057
 __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline]
 flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline]
 flush_tlb_mm_range+0x45f/0x16f0 arch/x86/mm/tlb.c:1451
 tlb_flush arch/x86/include/asm/tlb.h:23 [inline]
 tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:509 [inline]
 tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:499 [inline]
 tlb_flush_mmu mm/mmu_gather.c:423 [inline]
 tlb_finish_mmu+0x3fe/0x810 mm/mmu_gather.c:549
 free_ldt_pgtables+0x151/0x1c0 arch/x86/kernel/ldt.c:411
 arch_exit_mmap arch/x86/include/asm/mmu_context.h:229 [inline]
 exit_mmap+0x13f/0xa00 mm/mmap.c:1285
 __mmput kernel/fork.c:1187 [inline]
 mmput+0xe0/0x430 kernel/fork.c:1210
 exit_mm kernel/exit.c:615 [inline]
 do_exit+0x833/0x2a50 kernel/exit.c:997
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046
 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0xd2/0x530 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
 do_syscall_64+0x682/0x7f0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3999127407
Code: Unable to access opcode bytes at 0x7f39991273dd.
RSP: 002b:00007fff95fae520 EFLAGS: 00000202
 ORIG_RAX: 0000000000000000
RAX: fffffffffffffffc RBX: 00007f3999039880 RCX: 00007f3999127407
RDX: 0000000000001000 RSI: 00007fff95faea00 RDI: 0000000000000008
RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000559d0a99beb0
R13: 00007fff95fae600 R14: 00007fff95faea00 R15: 0000559cef373bcc
 </TASK>

report is corrupted, running repro again
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing program (duration=7m20.032906456s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

program did not crash
final repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
 0-....
 } 13523 jiffies s: 2753 root: 0x0/.
rcu: blocking rcu_node structures (internal RCU debug):