Extracting prog: 27m54.284343704s Minimizing prog: 2h50m49.940718992s Simplifying prog options: 12m5.564476302s Extracting C: 5m9.077826794s Simplifying C: 0s extracting reproducer from 67 programs testing a last program of every proc single: executing 17 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_open_procfs-openat$kvm-ioctl$KVM_CREATE_VM-io_submit-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_MSRS-openat$incfs-symlink-mkdirat-mkdir-mount$overlay-chdir-openat$cgroup_ro-ioctl$RTC_AIE_ON-setresuid-utimensat-ioctl$ifreq_SIOCGIFINDEX_vcan-pipe2-fsconfig$FSCONFIG_SET_PATH-mount$binderfs-open$dir-openat-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef1747600000000000010902240001000000000904000001d9b56c86a2a7388500012205000905810300000c0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="40076600000066110c0d623d0a7fa988d1c25d00e21d1437d5eb020000005a72496d473b283a21bda1b02338026769b1ba773bffffffff4e8864a9b068c8eff10cca24d73818e2ded6deab96b1cb87e49cbd9bde27c91106197e4304db00"/108], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_submit(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0}]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001}) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000568000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000440)="b94f0b00000f32b94a0a0000b800400000ba000000000f303e400f013d0d000000b9a3090000b80001c0feba000000000f300fc79a005800000f09b9660800000f3266baf80cb89c20b882ef66bafc0cb056ee660f38803b66b88d000f00d0", 0x5f}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100005fad4cee4517b66c9f2ba1b497d29cec7283ece4034d564b"]) r6 = openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0x4000, 0x120) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) setresuid(0xee00, 0xee01, 0x0) utimensat(r7, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x40) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f0000000200)='\x00', &(0x7f0000000240)='./file0\x00', r6) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) r9 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x10) openat(r9, &(0x7f00000002c0)='./file1\x00', 0x200, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mount$binderfs-mount-socket$inet6_tcp-ioctl$INCFS_IOC_CREATE_FILE detailed listing: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x19, 0x9c, 0x4f, 0x20, 0x7c9, 0xe, 0x5d4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x0, 0xff, 0xff}}]}}]}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRES8]) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x4014, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000180)={{}, {0xa}, 0x8, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)="c7824147c481dad0db6a47203e6dea8966c1ba27aeeb59d2549003363bbbe5f0a893038d0decf41fdfd6cfa8a49258efddb2cea800d93d59b59c17e82309ed4e7d49d2be1ac849c0fc690ddde55b13aa54158953f7b285c1da6e14f351f48652e25f8782e3e52916c85fdb97ab045882e868c0183ae3b814fd5944d6020450fd16d5618db0b6ff16f258045f823c88f54dc0b75788c961c78f36387c4de8d55b23e6886d5c9ad55612c98c644ea7afe6156a899be28ded497b9517a528931a50454d311e2da4bea99db491831addbc96c6d2e0b969ffa59cc3f8ef86db7869550854ad30a99b8a489617c54f24a98fb8c0d6a324", 0xf4, 0x0, &(0x7f0000000340)={0x2, 0x48, {0x1, 0xc, 0x3, "d40d5e", 0x38, "b1b1ed6eb3005ee624fca015b364fb56fbc17422b0a2233b4c1e2681e0038407eeb1b3b8144d7948ffa5c21e1e0b4337ef4112bc07b974fb"}, 0xe5, "de9f6e5bbb8fe7017c77ba35a6b1a35634847eb10c8409a15f673a475d4af395d885c3258c69b21327d7c2301384704bbb7fbd5dcf2b803b0da4532a81ec266f4323c089bc196883099c04c04d9c232e9222977e28ca02dbda84cc55b23e178738ca3b12f3353aab483f1d91ccfda5fa69c31cf389a72a5cbb0e0bd6942fa7e49ad346bdacba8e1652438be8ad7f9ca446759c6d546fa2ab8b59d979d01438a37bb6f30e3878e928c8a25f1c679b17d27fb47fd1901ca0112292e7080d41103634887fd3d7ae9e80d2c0a67113cec9ad0db18aa7ff4a4c7a41523901d93724f220bb747a54"}, 0x139}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$binderfs-open_tree-syz_usb_connect$uac1-read$FUSE detailed listing: executing program 0: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async, rerun: 32) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (rerun: 32) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) (async) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-openat$binderfs-sendmsg$NFT_BATCH-write$binfmt_script-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-mincore-ioctl$BINDER_GET_NODE_DEBUG_INFO-ioctl$BINDER_SET_CONTEXT_MGR_EXT-mmap$binder-socket$inet6_tcp-syz_init_net_socket$bt_hci-ioctl$sock_bt_hci-openat$rnullb-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-syz_open_dev$usbfs-ioctl$USBDEVFS_CONTROL-setsockopt$inet6_tcp_int-connect$inet6-getsockopt$inet_IP_IPSEC_POLICY-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-writev-ioctl$BINDER_WRITE_READ-syz_open_dev$usbfs detailed listing: executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000100404c0500100000000000010902240001000f500009040000010300020009210d000401220500090581030800de0520"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022d8"], 0x0}, 0x0) (async, rerun: 64) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000008c0)={0x80, 0x0, 0x6, 0x0, 0x36, 0x5, &(0x7f0000000840)="3dc48954970a822e13a7f6dea1ff33428d4d0eb132d54ef1ea0acf08aa710353ece69d6f690cd319fd28d37146075670d7b13b18cd1d"}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@private0}}, {{@in6=@private1}}}, &(0x7f0000000440)=0xe8) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000240)="2bfd7fb4eb56ab46bd41320ccacdcb8b91a71af91125fde16c645cd85efd29e1b0150fb77acbbba3b4ff2817b633230f7d7d8fd9e1ef231b391e84094fe34e4257bc4caa8bd8fde061a5dc3a169d2e1e4bd41fc3931474b60abe4664a0b51818d4cb1d1dcfd6b5c648fdf54f4c0f826f7566dd8231a35bb9fe31e54451daa58d5fc7bb15f03280cd50f2bc7f8142d1f171d7212c", 0x94}, {&(0x7f0000000140)="84e4c5045dcc18f8fa1f34fd52", 0xd}, {&(0x7f0000000380)="e00b436ce5eb8f68ea84c4431c12260575b34aa7d083ea199adc5781c3ca6f2fe2f0277f20c98bce1bb1964a89f53a0f49a9829bf80342d6f97220398f538b440e47f2c2ce0c5608277b2bc773f542a89cd699cfa73e5523a1320911816cf637757ae3d6c2259bcc8d11ef9fe514b6b1f4fba01686d16cb12bdd5995d873c2f25bf72b4046e0934e31426ed3dfe7a44a887f2f25df810bb1ab7cf7e02602d659d1", 0xa1}], 0x3) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) syz_open_dev$usbfs(&(0x7f00000004c0), 0x1, 0x900) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$rnullb-openat$uinput-ioctl$UI_SET_FFBIT-syz_open_dev$usbfs-ioctl$USBDEVFS_CONTROL-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x1000020050) r5 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000008c0)={0x80, 0x0, 0x6, 0x0, 0x36, 0x5, &(0x7f0000000840)="3dc48954970a822e13a7f6dea1ff33428d4d0eb132d54ef1ea0acf08aa710353ece69d6f690cd319fd28d37146075670d7b13b18cd1d"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open single: successfully extracted reproducer found reproducer with 23 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$rnullb-openat$uinput-ioctl$UI_SET_FFBIT-syz_open_dev$usbfs-ioctl$USBDEVFS_CONTROL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x1000020050) r5 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000008c0)={0x80, 0x0, 0x6, 0x0, 0x36, 0x5, &(0x7f0000000840)="3dc48954970a822e13a7f6dea1ff33428d4d0eb132d54ef1ea0acf08aa710353ece69d6f690cd319fd28d37146075670d7b13b18cd1d"}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$rnullb-openat$uinput-ioctl$UI_SET_FFBIT-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x1000020050) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$rnullb-openat$uinput-ioctl$UI_SET_FFBIT-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x1000020050) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$rnullb-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$rnullb-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-socket$nl_generic-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-ioctl$BINDER_WRITE_READ-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cgroup-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-socket$packet-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mkdir-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c70d30859fa6ecf3247a98a575453708dba6f365fbd58633b5672743d3078313830010300000000000030303030302c008ef926aac0d549bb57beff1b602667ca96d8d12e536ce020a71dd9b6d8a5affe91b502731dc9fb286d9d412c47c9305e7db3b1808554062303f23c91ced4e4a1c3905ee85d04eb81b4b9da466ce1b3d1d30fbb56aec2b84f"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$9p_tcp-ioctl$sock_SIOCGIFINDEX-syz_usb_connect-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-ioctl$BINDER_WRITE_READ-openat$uinput-syz_open_dev$usbfs-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL detailed listing: executing program 0: mkdir(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"c34b88dbac0a86dda4474194bd079a6e", 0x0, 0x0, {0xf2, 0x8}, {0xffffffffffffffff, 0xe3}, 0x0, [0x8, 0x4, 0x6, 0x1, 0x5, 0x53, 0x6, 0xabd, 0x5f, 0x7fffffff, 0x5, 0x7, 0x241, 0x1, 0xffffffff, 0x8]}) program crashed: INFO: task hung in usbdev_open validation run: crashed=true reproducing took 4h14m31.344519985s repro crashed as (corrupted=false): INFO: task syz.2.19:419 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:419 tgid:418 ppid:378 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fd85298d710 RSP: 002b:00007fd853814b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd85298d710 RDX: 0000000000000002 RSI: 00007fd853814c10 RDI: 00000000ffffff9c RBP: 00007fd853814c10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007fd852be6038 R14: 00007fd852be5fa0 R15: 00007ffd84830158 INFO: task syz.0.17:421 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:421 tgid:420 ppid:377 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f87ff18d710 RSP: 002b:00007f87fff51b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f87ff18d710 RDX: 0000000000000002 RSI: 00007f87fff51c10 RDI: 00000000ffffff9c RBP: 00007f87fff51c10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007f87ff3e6038 R14: 00007f87ff3e5fa0 R15: 00007ffcaea3a368 INFO: task syz.3.20:425 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:0 pid:425 tgid:424 ppid:380 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff39ed8d710 RSP: 002b:00007ff39fb67b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff39ed8d710 RDX: 0000000000000002 RSI: 00007ff39fb67c10 RDI: 00000000ffffff9c RBP: 00007ff39fb67c10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007ff39efe6038 R14: 00007ff39efe5fa0 R15: 00007ffeb6c2da78 INFO: task syz.5.18:429 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.18 state:D stack:0 pid:429 tgid:428 ppid:375 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f39d1b8d710 RSP: 002b:00007f39d2a3db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f39d1b8d710 RDX: 0000000000000002 RSI: 00007f39d2a3dc10 RDI: 00000000ffffff9c RBP: 00007f39d2a3dc10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007f39d1de6038 R14: 00007f39d1de5fa0 R15: 00007ffde7337668 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xd8f/0xed0 kernel/hung_task.c:423 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:__list_del_entry_valid_or_report+0x37/0x140 lib/list_debug.c:50 Code: 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 0d a2 2d ff 4c 8b 7b 08 <48> 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f3 a1 2d ff RSP: 0018:ffffc900002307f0 EFLAGS: 00000046 RAX: 1ffff110206ca281 RBX: ffff888103651400 RCX: 1ffff920000460f0 RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff888103651408 RBP: ffffc90000230810 R08: ffff888102e45a07 R09: 1ffff110205c8b40 R10: dffffc0000000000 R11: ffffed10205c8b41 R12: dffffc0000000000 R13: ffff888103651400 R14: ffff8881f6e506b0 R15: ffff88810ae4a700 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055558e65a4a8 CR3: 000000010bb34000 CR4: 00000000003526b0 Call Trace: __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_move include/linux/list.h:298 [inline] detach_tasks kernel/sched/fair.c:9925 [inline] sched_balance_rq+0x31bc/0x5060 kernel/sched/fair.c:12068 sched_balance_domains+0x4b4/0xa10 kernel/sched/fair.c:12500 _nohz_idle_balance+0x3e3/0x5a0 kernel/sched/fair.c:12951 nohz_idle_balance kernel/sched/fair.c:12994 [inline] sched_balance_softirq+0x8a/0x170 kernel/sched/fair.c:13229 handle_softirqs+0x1ab/0x630 kernel/softirq.c:621 __do_softirq kernel/softirq.c:659 [inline] invoke_softirq kernel/softirq.c:476 [inline] __irq_exit_rcu+0x48/0xc0 kernel/softirq.c:708 irq_exit_rcu+0xd/0x30 kernel/softirq.c:720 instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline] sysvec_call_function_single+0x7f/0x90 arch/x86/kernel/smp.c:266 asm_sysvec_call_function_single+0x1f/0x30 arch/x86/include/asm/idtentry.h:709 RIP: 0010:pv_native_safe_halt+0x17/0x20 arch/x86/kernel/paravirt.c:106 Code: cc cc cc b8 94 ba c0 ff 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 RAX: ffff8881f6f00000 RBX: ffff88810366b900 RCX: ffffffff858d20be RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000093e2b4 RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd720 R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb1da8 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3f/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1a0/0x470 kernel/sched/idle.c:326 cpu_startup_entry+0x48/0x70 kernel/sched/idle.c:424 start_secondary+0x12e/0x140 arch/x86/kernel/smpboot.c:314 common_startup_64+0x13b/0x157 final repro crashed as (corrupted=false): INFO: task syz.2.19:419 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:419 tgid:418 ppid:378 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fd85298d710 RSP: 002b:00007fd853814b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd85298d710 RDX: 0000000000000002 RSI: 00007fd853814c10 RDI: 00000000ffffff9c RBP: 00007fd853814c10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007fd852be6038 R14: 00007fd852be5fa0 R15: 00007ffd84830158 INFO: task syz.0.17:421 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:421 tgid:420 ppid:377 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f87ff18d710 RSP: 002b:00007f87fff51b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f87ff18d710 RDX: 0000000000000002 RSI: 00007f87fff51c10 RDI: 00000000ffffff9c RBP: 00007f87fff51c10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007f87ff3e6038 R14: 00007f87ff3e5fa0 R15: 00007ffcaea3a368 INFO: task syz.3.20:425 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:0 pid:425 tgid:424 ppid:380 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff39ed8d710 RSP: 002b:00007ff39fb67b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff39ed8d710 RDX: 0000000000000002 RSI: 00007ff39fb67c10 RDI: 00000000ffffff9c RBP: 00007ff39fb67c10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007ff39efe6038 R14: 00007ff39efe5fa0 R15: 00007ffeb6c2da78 INFO: task syz.5.18:429 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.18 state:D stack:0 pid:429 tgid:428 ppid:375 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7944 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:908 [inline] usbdev_open+0x171/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4db/0x5f0 fs/char_dev.c:414 do_dentry_open+0x978/0x1510 fs/open.c:960 vfs_open+0x86/0x230 fs/open.c:1090 do_open fs/namei.c:3774 [inline] path_openat+0x2b6c/0x34b0 fs/namei.c:3933 do_filp_open+0x1c6/0x3e0 fs/namei.c:3960 do_sys_openat2+0x12c/0x1c0 fs/open.c:1438 do_sys_open fs/open.c:1453 [inline] __do_sys_openat fs/open.c:1469 [inline] __se_sys_openat fs/open.c:1464 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1464 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f39d1b8d710 RSP: 002b:00007f39d2a3db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f39d1b8d710 RDX: 0000000000000002 RSI: 00007f39d2a3dc10 RDI: 00000000ffffff9c RBP: 00007f39d2a3dc10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd R13: 00007f39d1de6038 R14: 00007f39d1de5fa0 R15: 00007ffde7337668 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xd8f/0xed0 kernel/hung_task.c:423 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:__list_del_entry_valid_or_report+0x37/0x140 lib/list_debug.c:50 Code: 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 0d a2 2d ff 4c 8b 7b 08 <48> 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f3 a1 2d ff RSP: 0018:ffffc900002307f0 EFLAGS: 00000046 RAX: 1ffff110206ca281 RBX: ffff888103651400 RCX: 1ffff920000460f0 RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff888103651408 RBP: ffffc90000230810 R08: ffff888102e45a07 R09: 1ffff110205c8b40 R10: dffffc0000000000 R11: ffffed10205c8b41 R12: dffffc0000000000 R13: ffff888103651400 R14: ffff8881f6e506b0 R15: ffff88810ae4a700 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055558e65a4a8 CR3: 000000010bb34000 CR4: 00000000003526b0 Call Trace: __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_move include/linux/list.h:298 [inline] detach_tasks kernel/sched/fair.c:9925 [inline] sched_balance_rq+0x31bc/0x5060 kernel/sched/fair.c:12068 sched_balance_domains+0x4b4/0xa10 kernel/sched/fair.c:12500 _nohz_idle_balance+0x3e3/0x5a0 kernel/sched/fair.c:12951 nohz_idle_balance kernel/sched/fair.c:12994 [inline] sched_balance_softirq+0x8a/0x170 kernel/sched/fair.c:13229 handle_softirqs+0x1ab/0x630 kernel/softirq.c:621 __do_softirq kernel/softirq.c:659 [inline] invoke_softirq kernel/softirq.c:476 [inline] __irq_exit_rcu+0x48/0xc0 kernel/softirq.c:708 irq_exit_rcu+0xd/0x30 kernel/softirq.c:720 instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline] sysvec_call_function_single+0x7f/0x90 arch/x86/kernel/smp.c:266 asm_sysvec_call_function_single+0x1f/0x30 arch/x86/include/asm/idtentry.h:709 RIP: 0010:pv_native_safe_halt+0x17/0x20 arch/x86/kernel/paravirt.c:106 Code: cc cc cc b8 94 ba c0 ff 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 RAX: ffff8881f6f00000 RBX: ffff88810366b900 RCX: ffffffff858d20be RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000093e2b4 RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd720 R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb1da8 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3f/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1a0/0x470 kernel/sched/idle.c:326 cpu_startup_entry+0x48/0x70 kernel/sched/idle.c:424 start_secondary+0x12e/0x140 arch/x86/kernel/smpboot.c:314 common_startup_64+0x13b/0x157