Extracting prog: 1h11m13.424629105s
Minimizing prog: 2h41m59.913236319s
Simplifying prog options: 6m52.549632726s
Extracting C: 3m9.991074673s
Simplifying C: 19m31.448382415s


extracting reproducer from 81 programs
testing a last program of every proc
single: executing 31 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat2-ioctl$BTRFS_IOC_QUOTA_RESCAN-ioctl$FS_IOC_SETFLAGS-socket$inet_sctp-socket$nl_generic-ioctl$IOCTL_VMCI_VERSION-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-bpf$MAP_CREATE-ioctl$TIOCL_GETMOUSEREPORTING-recvfrom$rxrpc-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_TRAP_GROUP_GET-setsockopt$inet_sctp_SCTP_REUSE_PORT-openat$incfs-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_POWER_SAVE-socket$igmp6-sendmsg$NL80211_CMD_REQ_SET_REG-ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_UPDATE_FT_IES-readv-sendto$unix-setsockopt$inet6_MCAST_LEAVE_GROUP-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_PROBE_CLIENT-sendmsg$NL80211_CMD_START_SCHED_SCAN-ioctl$SNDCTL_TMR_TIMEBASE
detailed listing:
executing program 0:
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x42002, 0x38, 0x21}, 0x18)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x2, [0xde8, 0x3, 0x1, 0x1, 0xf6f, 0x100000000]})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x800000) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000100)=0x90000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', <r3=>0x0, 0x20, 0x7800, 0x80000000, 0x10001, {{0xc, 0x4, 0x3, 0x6, 0x30, 0x65, 0x0, 0x7, 0x0, 0x0, @remote, @local, {[@rr={0x7, 0x1b, 0x83, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @remote, @private=0xa010102, @multicast1]}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xa06, 0x4, 0xc, 0x0, r0, 0x6, '\x00', r3, r0, 0x5, 0x5, 0x1, 0xf}, 0x50) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000280))
recvfrom$rxrpc(r0, &(0x7f00000002c0)=""/95, 0x5f, 0x40000040, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000811) (async)
setsockopt$inet_sctp_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f0000000500)=0x7fff, 0x4) (async)
r6 = openat$incfs(r0, &(0x7f0000000540)='.pending_reads\x00', 0x0, 0x100) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000) (async)
r8 = socket$igmp6(0xa, 0x3, 0x2) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r7, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000007c0)={0x101, 0xb, 0x7, 0x1, 0x1, 0x9}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000880)={0x36c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000001, 0x7e}}}}, [@NL80211_ATTR_IE={0x2c4, 0x2a, [@fast_bss_trans={0x37, 0xa4, {0x6d, 0x5, "1fca83520b55943da32a75e5374ce669", "668bc74b018610e9e020300490b38891b269acef15fa9a9b5c9edb7685339f93", "73244464ee29b383c1e17e53c88f013498779578f06b71d7802ebc1f9230af78", [{0x1, 0x9, "70f7786f95fd959a38"}, {0x3, 0x4, "7c52258f"}, {0x3, 0xf, "8c1d7aa68b63d94f4b9923b14f3246"}, {0x4, 0x11, "855a84efdde67cbcfe198e7dda7e439a7b"}, {0x4, 0x1b, "fadf0285ae8138211be90a247163ab1ad5c98572a39a218533d126"}]}}, @rann={0x7e, 0x15, {{0x0, 0x68}, 0xf, 0x3, @device_b, 0x1, 0x4, 0x8}}, @tim={0x5, 0xc0, {0x9, 0xc4, 0x1, "36526e8f2deb7fb717a4699e1009d7f3a3ded096e951b39c44a3c42502f38a2b58828ea7d24e085106b57aa32b8ee84817618073087a5256292c0f610545644a3ef53952c589439d224b6157cd9736187e496cf3f045d6b7de23bd2fd81f6b69447a384312439fa341e53898a5024c7f2d097330a183b305384085f52d25598cdd3fb90e5583bf03f9f9d9796cfc40441dbdf96652efcab57da906b65e91add1777de2c98da7d16d28ec2e93d4f3a20d5cd42eca8772e427a8f0bfba50"}}, @perr={0x84, 0x10f, {0xf0, 0x11, [{{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x41}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x18}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x2d}, {{}, @broadcast, 0x0, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x80, @value, 0x28}, {{}, @device_a, 0x80000001}, {{}, @broadcast, 0x8, @void, 0x16}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x2e}, {{}, @device_a, 0x7630cdee, @void, 0x22}, {{0x0, 0x1}, @device_b, 0xfff, @value, 0x3d}, {{0x0, 0x1}, @device_a, 0xe00000, @value, 0x30}, {{0x0, 0x1}, @device_b, 0x48e, @value, 0x2}, {{}, @device_b, 0x80, @void, 0x2a}, {{}, @device_a, 0xf0, @void, 0x34}, {{}, @device_a, 0x9, @void, 0x24}, {{}, @device_a, 0x6, @void, 0x31}, {{}, @broadcast, 0xfff, @void, 0x11}]}}, @ssid={0x0, 0x1b, @random="de59f7809a0cdfe4253a6f90e10fcf39c804eedebc609d6a54df27"}, @cf={0x4, 0x6, {0x60, 0x9, 0x2, 0x42}}, @supported_rates={0x1, 0x1, [{0x3}]}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x76, 0x2a, [@supported_rates={0x1, 0x4, [{0x16}, {0x4}, {0x6}, {0xa424181571a11b9e}]}, @preq={0x82, 0x62, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x2, 0xb, @broadcast, 0x1a, @value=@broadcast, 0x1, 0x1, 0x6, [{{0x1}, @device_a, 0x9}, {{}, @broadcast, 0x1}, {{0x1}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x200}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}]}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x36c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)
readv(r8, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/54, 0x36}, {&(0x7f0000000d00)=""/210, 0xd2}], 0x2) (async)
sendto$unix(r6, &(0x7f0000000e40)="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", 0x1000, 0x20000085, &(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000001ec0)={0x7fffffff, {{0xa, 0x4e24, 0xffff, @mcast2, 0x200}}}, 0x88) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001fc0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x40, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc011)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async)
ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f00000021c0)=0x84)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$rds-sched_setscheduler-getpid-mmap$IORING_OFF_SQ_RING-ioctl$UFFDIO_API-socketpair$unix-gettid-timer_create-timer_settime-pipe-splice-write$cgroup_pid-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-timer_settime-close_range-bpf$PROG_LOAD_XDP-prctl$PR_SET_MM_MAP-socket$inet6-setsockopt$sock_linger-connect$inet6-openat$dlm_plock-sendmmsg$inet6-bpf$BPF_GET_MAP_INFO-io_uring_setup-getsockopt$bt_rfcomm_RFCOMM_CONNINFO-io_uring_enter
detailed listing:
executing program 0:
socket$rds(0x15, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x6})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380))
timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000440), 0xffffff98)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
timer_settime(0x0, 0x1, &(0x7f0000000580)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000005c0))
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffe68, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x64)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x103200, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0), 0x171}}], 0x400000000000172, 0x4000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r6 = io_uring_setup(0x1b7b, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000600)=""/236, &(0x7f0000000700)=0xec)
io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): landlock_create_ruleset-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-inotify_init1-inotify_add_watch-inotify_add_watch-inotify_add_watch-inotify_rm_watch-ppoll-mprotect-landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH-openat$vmci-openat$fuse-openat-syz_open_procfs-read$FUSE-pwrite64-write$FUSE_INIT-stat-write$FUSE_CREATE_OPEN-ioctl$IOCTL_VMCI_INIT_CONTEXT
detailed listing:
executing program 0:
r0 = landlock_create_ruleset(&(0x7f0000000340)={0x7f6e}, 0x18, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x8, 0xd4, 0x7fff0000}]})
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20)
inotify_add_watch(r1, &(0x7f0000000100)='./file0/file0\x00', 0x80)
r2 = inotify_add_watch(r0, &(0x7f0000000140)='./file0/file0\x00', 0x80b)
inotify_rm_watch(r1, r2)
ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000380)={0x1210a}, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='smaps\x00')
read$FUSE(r6, &(0x7f00000003c0)={0x2020, 0x0, <r7=>0x0}, 0x2071)
pwrite64(r5, &(0x7f0000002400)='\x00', 0x1, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002440)={0x50, 0x0, r7, {0x7, 0x2d, 0x401, 0x200100, 0x3, 0xc6, 0x9, 0x39, 0x0, 0x0, 0x100, 0x200}}, 0x50)
stat(&(0x7f00000024c0)='./file1\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$FUSE_CREATE_OPEN(r4, &(0x7f0000002580)={0xa0, 0x0, r7, {{0x2, 0x0, 0xe1, 0x8, 0x6681, 0x6, {0x6, 0x542f, 0x5, 0x11, 0xcc, 0x3, 0x427b, 0x81, 0x7, 0x8000, 0x2, r8, 0xee00, 0x8, 0xffff8037}}, {0x0, 0xc}}}, 0xa0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@host})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$inet6-sendmsg$key-socket$nl_generic-socket-sendmsg$nl_route-sendmmsg$alg-bind$netlink-socket$inet_udp-bind$inet-connect$inet-setsockopt$inet_IP_XFRM_POLICY-sendmmsg-gettid-close_range-openat$dsp-write$dsp-syz_open_procfs-read$FUSE-memfd_create-mmap-socket$inet_udp-syz_usb_connect-syz_usb_control_io-ftruncate-socket$inet6-socket$kcm-socket-getsockopt$inet_sctp_SCTP_MAX_BURST
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
bind$netlink(r0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000002280)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x80001, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x1, 0x32}, 0x0, @in=@loopback, 0x10003, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe, 0xd5}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
r3 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dsp(0xffffffffffffff9c, 0x0, 0x242, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000002180)="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", 0xfd)
r4 = syz_open_procfs(r3, &(0x7f0000000080)='maps\x00')
read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020)
r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d85f10"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r5, 0x3)
socket$inet6(0x10, 0x3, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x34, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$inet6-sendmsg$key-socket$nl_generic-socket-sendmsg$nl_route-sendmmsg$alg-bind$netlink-socket$inet_udp-bind$inet-connect$inet-setsockopt$inet_IP_XFRM_POLICY-sendmmsg-gettid-close_range-openat$dsp-write$dsp-syz_open_procfs-read$FUSE-memfd_create-mmap-socket$inet_udp-syz_usb_connect-syz_usb_control_io-ftruncate-socket$inet6-socket$kcm-socket-getsockopt$inet_sctp_SCTP_MAX_BURST
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000002280)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x80001, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x1, 0x32}, 0x0, @in=@loopback, 0x10003, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe, 0xd5}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
r3 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dsp(0xffffffffffffff9c, 0x0, 0x242, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000002180)="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", 0xfd)
r4 = syz_open_procfs(r3, &(0x7f0000000080)='maps\x00')
read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020)
r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d85f10"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r5, 0x3)
socket$inet6(0x10, 0x3, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x34, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-socket$nl_generic-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x210808, &(0x7f0000000180)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x5, 0x2e2, &(0x7f00000002c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="200604020000216819dd3ed1d570c2df6aae3a2c7d3669cea7ebd8702421800b594f24a3ee8880b6388edee4d69dd00baa6da80886bc4b37d5dc8ea5c8ed8a1b1e"], 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_emit_vhci-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_l2cap-dup-socket$nl_xfrm-bpf$MAP_CREATE-sendmsg$nl_xfrm-getsockopt-syz_mount_image$jfs-openat$nullb
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59d5}}}, 0xd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
dup(r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00'], 0x50)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x19, &(0x7f00000004c0)={&(0x7f0000000640)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0)
getsockopt(r1, 0x2, 0x5, &(0x7f0000006ac0)=""/147, &(0x7f0000006b80)=0x93)
syz_mount_image$jfs(&(0x7f00000008c0), &(0x7f0000000900)='./file1\x00', 0x1004010, &(0x7f0000000940)=ANY=[], 0xfc, 0x6071, &(0x7f0000000980)="$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")
openat$nullb(0xffffffffffffff9c, &(0x7f0000006a40), 0x48840, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_emit_vhci-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_l2cap-dup-socket$nl_xfrm-bpf$MAP_CREATE-sendmsg$nl_xfrm-getsockopt-syz_mount_image$jfs-openat$nullb
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59d5}}}, 0xd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
dup(r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00'], 0x50)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x19, &(0x7f00000004c0)={&(0x7f0000000640)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0)
getsockopt(r1, 0x2, 0x5, &(0x7f0000006ac0)=""/147, &(0x7f0000006b80)=0x93)
syz_mount_image$jfs(&(0x7f00000008c0), &(0x7f0000000900)='./file1\x00', 0x1004010, &(0x7f0000000940)=ANY=[], 0xfc, 0x6071, &(0x7f0000000980)="$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")
openat$nullb(0xffffffffffffff9c, &(0x7f0000006a40), 0x48840, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-prlimit64-sched_setscheduler-getpgrp-sched_setaffinity-prctl$PR_SCHED_CORE-getpid-sched_setscheduler-mmap-syz_clone-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-ioctl$USBDEVFS_DISCONNECT_CLAIM
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x3f000000, 0x4, "d0e5bc838c42ed8133d593038cc47d09f930c7db9a864141ce16c557b3d75a3fffd28b144ba10c6c06be5033f908922fb72c6245be42380d12ea6be006d364eae0fad8e681893654fa0bdeaa725bf6dd8da20dacad43d365e509940457fa1e132b1a5a9aeea6cf1b10a3a8994afc2f44d766ea0090f38a138d5930e766fbeeb587dd0caf4d02ba74731bb5d2ec60c2527fb613d5b0284b147f501cc7ada921ca1fd5bc3e0861a8c6d6bba7029784b5a18035f84d53102ba5df9bcf1796e589fef3f7a1bd21d251b53ec2814415e178a710acbc46be4091740c638ed70c495cacbefe799637db758537efdc6440d4cc3a3211c461a4963a4bdaa7f18be87c8172"})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-prlimit64-sched_setscheduler-fsopen-bpf$PROG_LOAD-fsconfig$FSCONFIG_CMD_CREATE-bpf$MAP_CREATE-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_TEST_RUN-openat$rtc-ioctl$RTC_SET_TIME-fsmount-fchdir-socketpair$unix-sendmmsg$unix-getpgrp-sched_setaffinity-prctl$PR_SCHED_CORE-openat$ocfs2_control-sched_setscheduler-mmap-timer_create-fcntl$lock-mprotect-timer_settime-mmap-set_mempolicy-openat$vmci-ioctl$IOCTL_VMCI_VERSION2-ioctl$IOCTL_VMCI_INIT_CONTEXT
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x7)
r1 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x16, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000002a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x18, 0x15, &(0x7f0000002f40)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES8=r0, @ANYRES32, @ANYRES16=r2], &(0x7f0000002640)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002700), 0x140, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000002740)={0x27, 0x22, 0x0, 0x1002, 0x8, 0x1000a9, 0x5, 0x20000003})
r5 = fsmount(r1, 0x1, 0xa)
fchdir(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
r7 = getpgrp(0x0)
sched_setaffinity(r7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
timer_create(0x0, &(0x7f0000002580)={0x0, 0x21, 0x2}, &(0x7f00000025c0)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002600)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000002f80), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
set_mempolicy(0x8006, &(0x7f00000001c0)=0xfff, 0x5)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000240)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f00000002c0)={@hyper})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-prlimit64-sched_setscheduler-fsopen-bpf$PROG_LOAD-fsconfig$FSCONFIG_CMD_CREATE-bpf$MAP_CREATE-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_TEST_RUN-openat$rtc-ioctl$RTC_SET_TIME-fsmount-fchdir-socketpair$unix-sendmmsg$unix-getpgrp-sched_setaffinity-prctl$PR_SCHED_CORE-openat$ocfs2_control-sched_setscheduler-mmap-timer_create-fcntl$lock-mprotect-timer_settime-mmap-set_mempolicy-openat$vmci-ioctl$IOCTL_VMCI_VERSION2-ioctl$IOCTL_VMCI_INIT_CONTEXT
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x7)
r1 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x16, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000002a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x18, 0x15, &(0x7f0000002f40)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES8=r0, @ANYRES32, @ANYRES16=r2], &(0x7f0000002640)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002700), 0x140, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000002740)={0x27, 0x22, 0x0, 0x1002, 0x8, 0x1000a9, 0x5, 0x20000003})
r5 = fsmount(r1, 0x1, 0xa)
fchdir(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
r7 = getpgrp(0x0)
sched_setaffinity(r7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
timer_create(0x0, &(0x7f0000002580)={0x0, 0x21, 0x2}, &(0x7f00000025c0)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002600)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000002f80), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
set_mempolicy(0x8006, &(0x7f00000001c0)=0xfff, 0x5)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000240)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f00000002c0)={@hyper})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-pidfd_send_signal-pidfd_send_signal-sendmsg$AUDIT_MAKE_EQUIV-read$FUSE-read$FUSE-bind$nfc_llcp
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pidfd_send_signal(r4, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0) (async)
pidfd_send_signal(r4, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfd, {0xd, 0x13, './debug/file0', './debug/usb/devices'}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) (async)
read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020)
bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)

program crashed: INFO: task hung in fdget_pos
single: successfully extracted reproducer
found reproducer with 28 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-pidfd_send_signal-pidfd_send_signal-sendmsg$AUDIT_MAKE_EQUIV-read$FUSE-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0) (async)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfd, {0xd, 0x13, './debug/file0', './debug/usb/devices'}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-pidfd_send_signal-pidfd_send_signal-sendmsg$AUDIT_MAKE_EQUIV-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0) (async)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfd, {0xd, 0x13, './debug/file0', './debug/usb/devices'}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-pidfd_send_signal-pidfd_send_signal-sendmsg$AUDIT_MAKE_EQUIV
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0) (async)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfd, {0xd, 0x13, './debug/file0', './debug/usb/devices'}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-pidfd_send_signal-pidfd_send_signal-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0) (async)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-pidfd_send_signal-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pidfd_send_signal(r3, 0x41, &(0x7f00000005c0)={0x41, 0x9, 0xfe}, 0x0) (async)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-openat$pidfd-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-openat$pidfd-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-sendmsg-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-sendmsg$L2TP_CMD_SESSION_DELETE-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c1005300", @ANYRES16=0x0, @ANYBLOB="01000cbd70100400000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-ioctl$XFS_IOC_PATH_TO_HANDLE-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1})
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-ioctl$XFS_IOC_PATH_TO_HANDLE-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000240)='debugfs\x00', 0x82040, &(0x7f0000000280)={@align=0x3, {0x5, 0x7, 0x1, 0x3}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) (async)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-mount-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mkdir-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-syz_usb_connect$uac3-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a000100000009040100000102300009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-syz_init_net_socket$nfc_llcp-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-bind$nfc_llcp-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_init_net_socket$nfc_llcp-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491")
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
syz_usb_ep_write(r0, 0x9d, 0xcc, &(0x7f0000000740)="375c209e592d06f7e6bb009ecff3b6f0ba0dda7198bd4d2751dfc38e2183320d8df298d268f27319ed6c53a47ad5f2267a013c83780ca959b0338d4d704ba5a3263b1594793efae86917e36d4bd10dfd526769548fe63d9a71aa2415ad960d7355c6211eb3c36324f317d70c525a6011826ad3bd3c8f99410f18bb8dc814d8249d42c560924ad6d4055c7a1bb01333a8eccd22c1f1c0b0c4f9f96ae35ef96d6430784a53d1d0559c3f5e03c72d5ccee5709c57ae83e0b5a054d18f01983b3cb81667918ca86703d42a98d491") (async)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
syz_usb_ep_read(r0, 0x1, 0xffffffffffffffec, 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) (async)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000680)=""/31) (async)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(0x0, 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, 0x0, &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program crashed: INFO: task hung in usb_device_read
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
program crashed: INFO: task hung in usb_device_read
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program crashed: INFO: task hung in usb_device_read
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program crashed: INFO: task hung in usb_device_read
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat-read$FUSE
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0)
mkdir(&(0x7f0000000700)='./debug\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)

program crashed: INFO: task hung in usb_device_read
validation run: crashed=true
reproducing took 4h35m28.874656161s
repro crashed as (corrupted=false):
INFO: task syz.0.17:5836 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.17        state:D stack:27112 pid:5836  tgid:5836  ppid:5748   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821
 device_lock include/linux/device.h:1104 [inline]
 usb_device_read+0x17c/0x2c0 drivers/usb/core/devices.c:529
 full_proxy_read+0x127/0x1f0 fs/debugfs/file.c:379
 vfs_read+0x213/0xa80 fs/read_write.c:572
 ksys_read+0x150/0x270 fs/read_write.c:716
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc23e39e1d9
RSP: 002b:00007fffeb478758 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fc23e625fa0 RCX: 00007fc23e39e1d9
RDX: 0000000000002020 RSI: 00002000000010c0 RDI: 0000000000000004
RBP: 00007fc23e435888 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc23e625fac R14: 00007fc23e625fa0 R15: 00007fc23e625fa0
 </TASK>

Showing all locks held in the system:
locks held by kworker/0:0/9: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802af941d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802af941d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88803576f1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88803576f1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802abe91a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802abe91a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by kworker/0:1/10: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff888079ced1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff888079ced1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff8880348021a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff8880348021a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by kworker/1:1/30: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802af561d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802af561d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff8880265471d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff8880265471d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802652f1a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802652f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by khungtaskd/33: 1, last CPU#1:
 #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/1:2/1570: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b1221d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b1221d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff8880785121d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff8880785121d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802c1851a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802c1851a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by getty/5371: 2, on CPU#0:
 #0: ffff888029f280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by kworker/1:4/5710: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b06f1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b06f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807892b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807892b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88807d9bf1a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88807d9bf1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.0.17/5836: 2, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
 #1: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #1: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: usb_device_read+0x17c/0x2c0 drivers/usb/core/devices.c:529
locks held by syz.1.18/5878: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.2.19/5925: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by kworker/0:5/5956: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802aff11d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802aff11d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88803528b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88803528b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff8880782931a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff8880782931a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.3.20/5967: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by kworker/0:6/5970: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b1e61d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b1e61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88801d3621d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88801d3621d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff888021bd51a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff888021bd51a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by kworker/0:7/6013: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b0bc1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b0bc1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807cf641d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807cf641d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff888058df41a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff888058df41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.4.21/6014: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by kworker/1:6/6048: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b1a01d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b1a01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807ddde1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807ddde1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff8880273c71a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff8880273c71a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.5.22/6065: 1, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.6.23/6111: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.7.24/6158: 1, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.8.25/6204: 1, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:109 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:151 [inline]
RIP: 0010:lock_acquire+0x13c/0x350 kernel/locking/lockdep.c:5946
Code: 02 00 00 48 83 c4 30 48 c7 c7 fc 1c 6f 8e e8 bb 6c 45 0a b8 ff ff ff ff 65 0f c1 05 36 ed f2 12 83 f8 01 0f 85 b0 00 00 00 9c <58> a9 00 02 00 00 0f 85 c3 00 00 00 f7 44 24 10 00 02 00 00 0f 85
RSP: 0018:ffffc900000076a0 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000102
RDX: 00000000f22c17ae RSI: ffffffff8e6f1cfc RDI: ffffffff8c6dde80
RBP: ffffffff8fa8f000 R08: ffffffff817811df R09: 0000000000000001
R10: dffffc0000000000 R11: ffffffff81b2c570 R12: ffffffff8fd5c8a0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000046
FS:  0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055dcc00fb660 CR3: 0000000071897000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 insert_work+0x3d/0x330 kernel/workqueue.c:2272
 __queue_work+0xd10/0x10e0 kernel/workqueue.c:2448
 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1794 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x67e/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 1b 8b 02 e9 6e 8f 27 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d5 20 00 fb f4 <e9> 47 8f 27 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246
RAX: 00000000016e48af RBX: ffffffff819becb0 RCX: 8000000000000001
RDX: 0000000000000001 RSI: ffffffff8e469729 RDI: ffffffff8c6dde80
RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743
R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000
R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000
 arch_safe_halt arch/x86/kernel/process.c:767 [inline]
 default_idle+0x9/0x20 arch/x86/kernel/process.c:768
 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x2e0/0x540 kernel/sched/idle.c:355
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454
 rest_init+0x378/0x3a0 init/main.c:732
 start_kernel+0x392/0x3e0 init/main.c:1190
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x157
 </TASK>

final repro crashed as (corrupted=false):
INFO: task syz.0.17:5836 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.17        state:D stack:27112 pid:5836  tgid:5836  ppid:5748   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821
 device_lock include/linux/device.h:1104 [inline]
 usb_device_read+0x17c/0x2c0 drivers/usb/core/devices.c:529
 full_proxy_read+0x127/0x1f0 fs/debugfs/file.c:379
 vfs_read+0x213/0xa80 fs/read_write.c:572
 ksys_read+0x150/0x270 fs/read_write.c:716
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc23e39e1d9
RSP: 002b:00007fffeb478758 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fc23e625fa0 RCX: 00007fc23e39e1d9
RDX: 0000000000002020 RSI: 00002000000010c0 RDI: 0000000000000004
RBP: 00007fc23e435888 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc23e625fac R14: 00007fc23e625fa0 R15: 00007fc23e625fa0
 </TASK>

Showing all locks held in the system:
locks held by kworker/0:0/9: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802af941d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802af941d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88803576f1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88803576f1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802abe91a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802abe91a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by kworker/0:1/10: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff888079ced1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff888079ced1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff8880348021a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff8880348021a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by kworker/1:1/30: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802af561d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802af561d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff8880265471d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff8880265471d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802652f1a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802652f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by khungtaskd/33: 1, last CPU#1:
 #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/1:2/1570: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90005f17c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b1221d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b1221d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff8880785121d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff8880785121d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802c1851a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802c1851a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by getty/5371: 2, on CPU#0:
 #0: ffff888029f280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by kworker/1:4/5710: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000359fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b06f1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b06f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807892b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807892b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88807d9bf1a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88807d9bf1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.0.17/5836: 2, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
 #1: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #1: ffff888027ed21d8 (&dev->mutex){....}-{4:4}, at: usb_device_read+0x17c/0x2c0 drivers/usb/core/devices.c:529
locks held by syz.1.18/5878: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.2.19/5925: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by kworker/0:5/5956: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000376fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802aff11d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802aff11d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88803528b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88803528b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff8880782931a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff8880782931a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.3.20/5967: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by kworker/0:6/5970: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000362fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b1e61d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b1e61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88801d3621d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88801d3621d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff888021bd51a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff888021bd51a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by kworker/0:7/6013: 5, on CPU#0:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000390fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b0bc1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b0bc1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807cf641d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807cf641d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff888058df41a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff888058df41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.4.21/6014: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by kworker/1:6/6048: 5, on CPU#1:
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888024299140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90002e0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802b1a01d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802b1a01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807ddde1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807ddde1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff8880273c71a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff8880273c71a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.5.22/6065: 1, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.6.23/6111: 1, on CPU#1:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.7.24/6158: 1, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523
locks held by syz.8.25/6204: 1, on CPU#0:
 #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 drivers/usb/core/devices.c:523

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:109 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:151 [inline]
RIP: 0010:lock_acquire+0x13c/0x350 kernel/locking/lockdep.c:5946
Code: 02 00 00 48 83 c4 30 48 c7 c7 fc 1c 6f 8e e8 bb 6c 45 0a b8 ff ff ff ff 65 0f c1 05 36 ed f2 12 83 f8 01 0f 85 b0 00 00 00 9c <58> a9 00 02 00 00 0f 85 c3 00 00 00 f7 44 24 10 00 02 00 00 0f 85
RSP: 0018:ffffc900000076a0 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000102
RDX: 00000000f22c17ae RSI: ffffffff8e6f1cfc RDI: ffffffff8c6dde80
RBP: ffffffff8fa8f000 R08: ffffffff817811df R09: 0000000000000001
R10: dffffc0000000000 R11: ffffffff81b2c570 R12: ffffffff8fd5c8a0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000046
FS:  0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055dcc00fb660 CR3: 0000000071897000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 insert_work+0x3d/0x330 kernel/workqueue.c:2272
 __queue_work+0xd10/0x10e0 kernel/workqueue.c:2448
 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1794 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x67e/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 1b 8b 02 e9 6e 8f 27 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d5 20 00 fb f4 <e9> 47 8f 27 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246
RAX: 00000000016e48af RBX: ffffffff819becb0 RCX: 8000000000000001
RDX: 0000000000000001 RSI: ffffffff8e469729 RDI: ffffffff8c6dde80
RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743
R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000
R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000
 arch_safe_halt arch/x86/kernel/process.c:767 [inline]
 default_idle+0x9/0x20 arch/x86/kernel/process.c:768
 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x2e0/0x540 kernel/sched/idle.c:355
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454
 rest_init+0x378/0x3a0 init/main.c:732
 start_kernel+0x392/0x3e0 init/main.c:1190
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x157
 </TASK>