Extracting prog: 32m29.732604342s
Minimizing prog: 5h14m57.06049655s
Simplifying prog options: 0s
Extracting C: 3m4.691907103s
Simplifying C: 25m51.731286566s


extracting reproducer from 35 programs
testing a last program of every proc
single: executing 10 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ncm-syz_usb_connect$uac1-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "d18e7981c0b1acc4b0c292463f224efba6"}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0xc, 0x11, {0x11, 0x9, "1b40041075d5f39ba8168cc89aea81"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f00000001c0)={0x20, 0x7, 0x3f, "0e2aedb84504f5da5b286927892f637d3a9495484a33cd8cf115e9cb9121e8e3e6f795653d644ac7d566236624d5170e0afe38f38b234ba806228bb48605ef"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5b}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x200, 0x569e, 0x20, 0xd3, 0xbc37, 0x5f8, 0x7, 0xffffff7f, 0x0, 0xc000, 0x1, 0xd88}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x3cc1}, &(0x7f0000000540)={0x20, 0x89, 0x2}})
syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b000301000000090400ffe3010100000a2401000000020102092408000000004c5806240400005207240b24050000133b9bda531c092405010596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200460904020101010200000b24020300020001000000072401000000000905820910"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x40, 0x1, 0x8b, {0x8b, 0x9, "f45895373f234a1bcb794c227946d8f1ab1590e55e1dc046ce09f799dbc857c1632611ebd29a98af29b418116b95ac93ee098155b89e88b3d46533d39b9f96efa6056ff00d9a0d42c1daa82fe79615522dd3c2789ea7777c78b21b2990b478dad754b7ef65422e162ca0900cdab00be3410a323fd616ac75517aabf1b5b32b54f47ae9a9117eaf280c"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000800)={0x40, 0x13, 0xca, "101af244270556a64032b48be8129af6045e4c571bb6ee330c8cd8a56bc2d0b3fb7fe310a2553e76ee52adaa4d994d7213963d6e196e0aa7c9db6de9c374de14ec3a36f88ae521731652a9552294059f258a92adbe2562ea73e8c944826f5ab61f24a156b46601d21b381fb156ee1b13424b3699ed7cc7c04335afb0e9159b012c5829a5db13703b9649b4a4702bd677be1b57ed4df7aca6553cfa29047811e67dfcb8ec07aea11e044abd4d1c62bff503feb9d2dd0ea17c50ec78fa678779f89e75e7a03eb784c30a29"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x2}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-ioctl$EVIOCSREP-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x1410c0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x4, 0x2])
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$uac1-syz_usb_control_io$cdc_ecm-syz_usb_ep_write$ath9k_ep1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a2000301ab00000904000000010100000a24010000000201020c240703000000ed129e84300724080000000009240300000003020009040100000102000009040101010102000008240201"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1028a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"], 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='Q')
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8)
read$char_usb(r1, &(0x7f0000000680)=""/204, 0xcc)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x0, 0x3, 0x40, {0x40, 0x22, "0911a3c69951680c03856e18fd13fc8c995fae7ab1d067c2b55369a8a8eccb9d741b09ce3d0ca3a0992bd710c4f1730a017c5b886ea792dcaeaa3fdd25f9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x5, "88920f95"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "38f11063"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x78, 0x1, {0x22, 0x30a}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x16, 0xe9, "38961d641b851cc77604d247384ae767698448994eff32e9217c9ee3e8d3abadd3329f9efa5dae888f087ada2a964c7d7a73a4bc14d2addf1029b8af9cc549b0133369392e0be3b2db94713795208dfae189edc07517e7b55665e97cdf8ca01a368c1d14bbe5b7ef4aa9d35a35160771b2a8f26c49db3cc8b21a2b6fc8daf06b171e836ee5ff22bb81ac6f4a4458e1739a5512c7b26bd8dc7c5d153bd941cfca4a3efec2a45ff8ecc9ed79a89dfeaa7d361fb2f7f4d7455bf4dba9859fdf37e45221ab9a7ac17f6d59a2cdaa82350edf717efe472233dd37aec10d3eba04388975126e86e7de0590fc"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x1, 0xe4, "6376e5eb6464911407b1557310494f7bac8768918e22d3ea5c685323cc13f8dfe03b59832f9e1638b67bd45b34372df82592268bbc43494825596e91e3f11ed23f9e6d21cdea1170ab9839af7d35caeec42903f19394a49a0a39b2382323ee39ec762609c1391ae5b8c3616381b960cf26bf8e2a57b31a1e4d6fca169b1cd288d22f9f4cc6cbc6150dc00812a8e702049ef75ef399321823bec714c1ee1bd683db1e6dad7eb919f6bd1a87030d46905f58491090e69656dd87e7bb607e4d59ecdbef4821772196f9a37cec6fc6d0142dd041f6f5e844ece3cd83f2c7bacbbe7ec1a83f20"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x80}})
syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x3, "769d5a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x82, 0x1, '\x00'}, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r8)
r9 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_disconnect(r9)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: task hung in uevent_show
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r8)
r9 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_disconnect(r9)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r8)
r9 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r8)
r9 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_connect$printer-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r8)
r9 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_disconnect-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r8)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: task hung in uevent_show
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_connect$cdc_ecm-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_open_dev$char_usb-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x1, 'G'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-read$char_usb-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, 0x0, 0x0)
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_open_dev$char_usb-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: task hung in jbd2_journal_commit_transaction
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: task hung in uevent_show
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x700, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: task hung in synchronize_rcu
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: task hung in synchronize_rcu
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$cdc_ncm-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program crashed: INFO: rcu detected stall in hub_event
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905", @ANYRES32], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program crashed: INFO: task hung in uevent_show
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)

program did not crash
testing program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
detailed listing:
executing program 0:
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "273c53e0d9b6451cbbdd015db554c04bc5036627dceda67fc6c8eae1657e62e54f57de39ca1efb"}}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000a00)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
extracting C reproducer
testing compiled C program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: INFO: rcu detected stall in corrupted
simplifying C reproducer
testing compiled C program (duration=9m19.661727265s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=9m19.661727265s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_disconnect-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_connect$cdc_ecm-syz_open_dev$evdev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-ioctl$EVIOCRMFF-syz_usb_control_io-syz_usb_connect$uac1
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 6h16m23.216312191s
repro crashed as (corrupted=false):
INFO: task udevd:2961 blocked for more than 143 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:26944 pid:2961  tgid:2961  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa65810 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:2964 blocked for more than 143 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27312 pid:2964  tgid:2964  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa630c0 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000400
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:2971 blocked for more than 144 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27232 pid:2971  tgid:2971  ppid:2842   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa460f0 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:3005 blocked for more than 144 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27216 pid:3005  tgid:3005  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa48f00 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:3035 blocked for more than 145 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27648 pid:3035  tgid:3035  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fb296b0 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/8:
5 locks held by kworker/0:1/9:
5 locks held by ksoftirqd/0/15:
1 lock held by khungtaskd/30:
 #0: ffffffff88ebc880
 (rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744
5 locks held by kworker/0:2/711:
2 locks held by getty/2900:
 #0: 
ffff888100eac0a0
 (&tty->ldisc_sem
){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900000432f0
 (&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
4 locks held by udevd/2961:
 #0: 
ffff88811a8d6d58
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a880488
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811b0da2d8
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c666190
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
5 locks held by kworker/0:3/2962:
4 locks held by udevd/2964:
 #0: ffff88811a8d6b08
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a880c88
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811a3f9c38
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c665190
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
5 locks held by kworker/0:4/2966:
4 locks held by udevd/2971:
 #0: 
ffff888118fc7d58
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a881488
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff888119993008
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c86e190
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
4 locks held by udevd/3005:
 #0: 
ffff888118fc7e80 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a881088
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff8881222e2698
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c868190 (
&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
4 locks held by udevd/3035:
 #0: 
ffff88811a8d6c30
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a880888
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811a0a1b48
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c86f160
 (&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline]
 watchdog+0xf14/0x1240 kernel/hung_task.c:397
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
radio-si470x 4-1:0.0: non-zero urb status (-71)
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:416
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 31 29 0c ff eb a0 e8 ba 29 0c
RSP: 0018:ffffc900000ff2e0 EFLAGS: 00000002
RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff82a90575 RDI: ffffffff93643920
RBP: ffffffff936438e0 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000
R13: 000000000000005b R14: ffffffff82a90510 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc71a146d6c CR3: 0000000116496000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 serial_out drivers/tty/serial/8250/8250.h:142 [inline]
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3342 [inline]
 serial8250_console_write+0xf9e/0x17c0 drivers/tty/serial/8250/8250_port.c:3413
 console_emit_next_record kernel/printk/printk.c:3122 [inline]
 console_flush_all+0x800/0xc60 kernel/printk/printk.c:3210
 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline]
 console_unlock+0xd9/0x210 kernel/printk/printk.c:3309
 vprintk_emit+0x424/0x6f0 kernel/printk/printk.c:2432
 dev_vprintk_emit drivers/base/core.c:4935 [inline]
 dev_printk_emit+0xfb/0x140 drivers/base/core.c:4946
 __dev_printk+0xf5/0x270 drivers/base/core.c:4958
 _dev_warn+0xe5/0x120 drivers/base/core.c:5002
 si470x_int_in_callback+0x15e/0xca0 drivers/media/radio/si470x/radio-si470x-usb.c:378
 __usb_hcd_giveback_urb+0x389/0x6e0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
 dummy_timer+0x17f7/0x3960 drivers/usb/gadget/udc/dummy_hcd.c:1993
 __run_hrtimer kernel/time/hrtimer.c:1739 [inline]
 __hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1803
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1820
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
 run_ksoftirqd kernel/softirq.c:950 [inline]
 run_ksoftirqd+0x3a/0x60 kernel/softirq.c:942
 smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
INFO: task udevd:2961 blocked for more than 143 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:26944 pid:2961  tgid:2961  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa65810 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:2964 blocked for more than 143 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27312 pid:2964  tgid:2964  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa630c0 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000400
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:2971 blocked for more than 144 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27232 pid:2971  tgid:2971  ppid:2842   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa460f0 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:3005 blocked for more than 144 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27216 pid:3005  tgid:3005  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fa48f00 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>
INFO: task udevd:3035 blocked for more than 145 seconds.
      Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:27648 pid:3035  tgid:3035  ppid:2842   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 __mutex_lock_common kernel/locking/mutex.c:665 [inline]
 __mutex_lock+0x62b/0xa60 kernel/locking/mutex.c:735
 device_lock include/linux/device.h:1014 [inline]
 uevent_show+0x188/0x3b0 drivers/base/core.c:2729
 dev_attr_show+0x53/0xe0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
 seq_read_iter+0x4f4/0x12b0 fs/seq_file.c:230
 kernfs_fop_read_iter+0x414/0x580 fs/kernfs/file.c:279
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x87f/0xbe0 fs/read_write.c:565
 ksys_read+0x12b/0x250 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7a8907bb6a
RSP: 002b:00007fffe5338e98 EFLAGS: 00000246
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000056211fa2e570 RCX: 00007f7a8907bb6a
RDX: 0000000000001000 RSI: 000056211fb296b0 RDI: 0000000000000008
RBP: 000056211fa2e570 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffe5339378 R15: 000000000000000a
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/8:
5 locks held by kworker/0:1/9:
5 locks held by ksoftirqd/0/15:
1 lock held by khungtaskd/30:
 #0: ffffffff88ebc880
 (rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744
5 locks held by kworker/0:2/711:
2 locks held by getty/2900:
 #0: 
ffff888100eac0a0
 (&tty->ldisc_sem
){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900000432f0
 (&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
4 locks held by udevd/2961:
 #0: 
ffff88811a8d6d58
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a880488
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811b0da2d8
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c666190
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
5 locks held by kworker/0:3/2962:
4 locks held by udevd/2964:
 #0: ffff88811a8d6b08
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a880c88
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811a3f9c38
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c665190
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
5 locks held by kworker/0:4/2966:
4 locks held by udevd/2971:
 #0: 
ffff888118fc7d58
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a881488
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff888119993008
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c86e190
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
4 locks held by udevd/3005:
 #0: 
ffff888118fc7e80 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a881088
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff8881222e2698
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c868190 (
&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729
4 locks held by udevd/3035:
 #0: 
ffff88811a8d6c30
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182
 #1: 
ffff88811a880888
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88811a0a1b48
 (
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: 
ffff88811c86f160
 (&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1014 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2729

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline]
 watchdog+0xf14/0x1240 kernel/hung_task.c:397
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
radio-si470x 4-1:0.0: non-zero urb status (-71)
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00068-gd7123c77dc60 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:416
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 31 29 0c ff eb a0 e8 ba 29 0c
RSP: 0018:ffffc900000ff2e0 EFLAGS: 00000002
RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff82a90575 RDI: ffffffff93643920
RBP: ffffffff936438e0 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000
R13: 000000000000005b R14: ffffffff82a90510 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc71a146d6c CR3: 0000000116496000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 serial_out drivers/tty/serial/8250/8250.h:142 [inline]
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3342 [inline]
 serial8250_console_write+0xf9e/0x17c0 drivers/tty/serial/8250/8250_port.c:3413
 console_emit_next_record kernel/printk/printk.c:3122 [inline]
 console_flush_all+0x800/0xc60 kernel/printk/printk.c:3210
 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline]
 console_unlock+0xd9/0x210 kernel/printk/printk.c:3309
 vprintk_emit+0x424/0x6f0 kernel/printk/printk.c:2432
 dev_vprintk_emit drivers/base/core.c:4935 [inline]
 dev_printk_emit+0xfb/0x140 drivers/base/core.c:4946
 __dev_printk+0xf5/0x270 drivers/base/core.c:4958
 _dev_warn+0xe5/0x120 drivers/base/core.c:5002
 si470x_int_in_callback+0x15e/0xca0 drivers/media/radio/si470x/radio-si470x-usb.c:378
 __usb_hcd_giveback_urb+0x389/0x6e0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
 dummy_timer+0x17f7/0x3960 drivers/usb/gadget/udc/dummy_hcd.c:1993
 __run_hrtimer kernel/time/hrtimer.c:1739 [inline]
 __hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1803
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1820
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
 run_ksoftirqd kernel/softirq.c:950 [inline]
 run_ksoftirqd+0x3a/0x60 kernel/softirq.c:942
 smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>