Extracting prog: 29m2.965593526s
Minimizing prog: 2h5m26.694062166s
Simplifying prog options: 13m29.216849984s
Extracting C: 5m9.022538715s
Simplifying C: 0s


extracting reproducer from 28 programs
testing a last program of every proc
single: executing 8 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket-write-ioctl$sock_inet_SIOCSIFADDR-socket$inet_udp-sendmsg$NL80211_CMD_RELOAD_REGDB-bind$inet-fcntl$lock-ioctl$sock_inet_SIOCSIFADDR
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x3, 0x4, 0x5})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}})

program did not crash
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-openat-socket$packet-setsockopt$packet_int-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendto$packet-inotify_init-inotify_add_watch-write$binfmt_misc-splice
detailed listing:
executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000140)="330312001200140000007ef52f555f2a0c09000000fd810000f786dd3baa4b1f0f852b4632f47042195e0b8ca9767e06b5", 0x31, 0x3674842c2925b8c7, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x62, 0x6, @broadcast}, 0x14)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x449)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x33fe0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring-accept4$unix-setsockopt$SO_BINDTODEVICE_wg-setsockopt$packet_int-syz_usb_connect
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040), 0x4)
syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-socket$packet-setsockopt$packet_tx_ring-sendto$inet-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x8000, 0x80000000, 0x3, 0x3, 0x7f, 0xffff, 0x7}, 0x1c)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="f2313bc6e65be5960545e1feb597fae145d65b496e6c7474969e97b7061d4fdf9a850953869e82cd3ad4fd161812992713929ac280cce649c84fbf4b56bacb", 0x3f, 0x11, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-socket$packet-setsockopt$packet_tx_ring-sendto$inet
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x8000, 0x80000000, 0x3, 0x3, 0x7f, 0xffff, 0x7}, 0x1c)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="f2313bc6e65be5960545e1feb597fae145d65b496e6c7474969e97b7061d4fdf9a850953869e82cd3ad4fd161812992713929ac280cce649c84fbf4b56bacb", 0x3f, 0x11, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-socket$packet-setsockopt$packet_tx_ring-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x8000, 0x80000000, 0x3, 0x3, 0x7f, 0xffff, 0x7}, 0x1c)
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-socket$packet-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in rtnl_dumpit
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_connect$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x9}, {0x40000002, 0x0, 0x100000000}]})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in rtnl_lock
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in synchronize_rcu
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in rtnl_lock
extracting C reproducer
testing compiled C program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m42.031920241s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=6m42.031920241s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150-syz_usb_control_io-openat$tun-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="20091b00000061853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b250532b7a096f7535c82f98a2e76245fc8011c5f99347f2a00b927a71919a7a99cf015d9500b0489d078339e779f630da794013fae940cfd3a634d04d244cd001b4ce7102f45c4fd4d5e507b4f4d262a60f5000cbf78b3a03a6164f8a0a8ecfb1ce08e9696062d0c5b8fcea89e5fc951d58491c01af64e0d43884d2b98bc638e981b86aa905205fba5754f1ae5467448bc5cef23bec6e6f4dfe440503b6934334c601280b39ef04363703642be4107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffff7f0000000027e9509596"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: INFO: task hung in x64_sys_call
validation run: crashed=true
reproducing took 3h2m52.228065897s
repro crashed as (corrupted=false):
INFO: task udevd:111 blocked for more than 122 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:0     pid:111   tgid:111   ppid:1      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5996 [inline]
 __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843
 __schedule_loop kernel/sched/core.c:7924 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7939
 schedule_hrtimeout_range_clock+0x197/0x320 kernel/time/hrtimer.c:2349
 schedule_hrtimeout_range+0x2c/0x40 kernel/time/hrtimer.c:2396
 ep_poll fs/eventpoll.c:1986 [inline]
 do_epoll_wait+0x15b1/0x1810 fs/eventpoll.c:2414
 __do_sys_epoll_wait fs/eventpoll.c:2426 [inline]
 __se_sys_epoll_wait fs/eventpoll.c:2421 [inline]
 __x64_sys_epoll_wait+0x1d8/0x230 fs/eventpoll.c:2421
 x64_sys_call+0x2be4/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:233
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fbccb6a7407
RSP: 002b:00007ffd412db8d0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 00007fbccbe6a880 RCX: 00007fbccb6a7407
RDX: 0000000000000008 RSI: 00007ffd412dba30 RDI: 000000000000000b
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000bb8 R11: 0000000000000202 R12: 0000000000000000
R13: 00005651b6eb3100 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 651adc2629b0b4f371d8cab24d98ca400350956b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
 watchdog+0xdad/0xf00 kernel/hung_task.c:423
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 651adc2629b0b4f371d8cab24d98ca400350956b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:106
Code: cc cc cc cc cc cc cc b8 23 f9 86 ed 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9c 48 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff859eba4d
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000317dcc
RBP: ffffffff87407da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6
R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e82ad8
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87ebca68
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f92da548060 CR3: 000000011322c000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline]
 default_idle+0x17/0x30 arch/x86/kernel/process.c:754
 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791
 default_idle_call+0x3e/0x80 kernel/sched/idle.c:117
 cpuidle_idle_call kernel/sched/idle.c:185 [inline]
 do_idle+0x19f/0x4b0 kernel/sched/idle.c:326
 cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:424
 rest_init+0x10b/0x130 init/main.c:760
 start_kernel+0x462/0x4bb init/main.c:1242
 x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507
 x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488
 common_startup_64+0x13b/0x157
 </TASK>
read_bulk_callback: 945 callbacks suppressed
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: eth1: intr status -71
usb 10-1: eth1: intr status -71
usb 10-1: eth1: intr status -71

final repro crashed as (corrupted=false):
INFO: task udevd:111 blocked for more than 122 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:0     pid:111   tgid:111   ppid:1      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5996 [inline]
 __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843
 __schedule_loop kernel/sched/core.c:7924 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7939
 schedule_hrtimeout_range_clock+0x197/0x320 kernel/time/hrtimer.c:2349
 schedule_hrtimeout_range+0x2c/0x40 kernel/time/hrtimer.c:2396
 ep_poll fs/eventpoll.c:1986 [inline]
 do_epoll_wait+0x15b1/0x1810 fs/eventpoll.c:2414
 __do_sys_epoll_wait fs/eventpoll.c:2426 [inline]
 __se_sys_epoll_wait fs/eventpoll.c:2421 [inline]
 __x64_sys_epoll_wait+0x1d8/0x230 fs/eventpoll.c:2421
 x64_sys_call+0x2be4/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:233
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fbccb6a7407
RSP: 002b:00007ffd412db8d0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 00007fbccbe6a880 RCX: 00007fbccb6a7407
RDX: 0000000000000008 RSI: 00007ffd412dba30 RDI: 000000000000000b
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000bb8 R11: 0000000000000202 R12: 0000000000000000
R13: 00005651b6eb3100 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 651adc2629b0b4f371d8cab24d98ca400350956b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
 watchdog+0xdad/0xf00 kernel/hung_task.c:423
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 651adc2629b0b4f371d8cab24d98ca400350956b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:106
Code: cc cc cc cc cc cc cc b8 23 f9 86 ed 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9c 48 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff859eba4d
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000317dcc
RBP: ffffffff87407da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6
R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e82ad8
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87ebca68
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f92da548060 CR3: 000000011322c000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline]
 default_idle+0x17/0x30 arch/x86/kernel/process.c:754
 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791
 default_idle_call+0x3e/0x80 kernel/sched/idle.c:117
 cpuidle_idle_call kernel/sched/idle.c:185 [inline]
 do_idle+0x19f/0x4b0 kernel/sched/idle.c:326
 cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:424
 rest_init+0x10b/0x130 init/main.c:760
 start_kernel+0x462/0x4bb init/main.c:1242
 x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507
 x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488
 common_startup_64+0x13b/0x157
 </TASK>
read_bulk_callback: 945 callbacks suppressed
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: Rx status -71
usb 10-1: eth1: intr status -71
usb 10-1: eth1: intr status -71
usb 10-1: eth1: intr status -71
usb 10-1: eth1: intr status -71