Extracting prog: 48m17.24257428s Minimizing prog: 2h51m19.429371645s Simplifying prog options: 12m20.611048173s Extracting C: 5m9.798423456s Simplifying C: 0s extracting reproducer from 39 programs testing a last program of every proc single: executing 9 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000004c0)={@val={0x0, 0x1b}, @val={0x1, 0x80, 0x1, 0x4, 0x5, 0x7}, @ipv6=@udp={0x6, 0x6, "a67ec4", 0x244, 0x11, 0x0, @loopback, @empty, {[@fragment={0x29, 0x0, 0x8, 0x0, 0x0, 0x1, 0x67}, @dstopts={0x1, 0x5, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xa}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1]}, @hopopts={0x62, 0xb, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @private2}, @generic={0xa9, 0x33, "6b64d98ef6cdea9773998cef644db36a7b91a2f85ea5ded4e9f546003f352e5e35d6221b501ddb106014cebdb7a68f5e294b16"}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0xff, 0x18, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x9, [0x1, 0x28e, 0x7fff]}}, @generic={0x57, 0x99, "a6afb154eb485a6307cfd239b9e1992daac92feef3b51acc58dbdb6bcdf42f059242334c565acfca66b73979340ae00b3f339e1b3b5a030411ea8b0fe1bc1ea38908699ea41f7d25b7d6453f09b0d1d3de1c515836ed7e7ff2714695a1b12dddbb80146b73043f76a4cb7b9d0aaa18f998eaa11a96e1f4eb749fb750a51254078a1e5fb47782f2195f33f4bb23f7e29497eaab008bbd1ec1ea"}, @pad1]}, @routing={0x1d, 0x2, 0x2, 0x4, 0x0, [@loopback]}], {0x4e23, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "9f67b8edd87bc9dd78f1d282b54929f0e2e11f740313868a1c5940e2ddb0b139", "bf2cd27634e8d9a788a26662610b4a0951376c2467994fa88c3ce154600a8aa31f073c82f3bd9a21bf6bc6feaba6e5a4", "ca0c0c7f7ef1d65edb7c3c01e830e86c24757cceec9fd9f4f3bb312e", {"57ff60768b5d47e4adfc1e99e0c652e1", "f4b34a125d5c37bf23bfafafd002629e"}}}}}}, 0x27a) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$tipc-connect$tipc-bind$tipc-socket$tipc-connect$inet-madvise-syz_open_procfs$pagemap-ioctl$PAGEMAP_SCAN-sendmsg$tipc-close-socket$nl_xfrm-socket$inet_tcp-getsockopt$ARPT_SO_GET_REVISION_TARGET-ioctl$XFS_IOC_SWAPEXT-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e4, 0x0, 0x10}) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x1a, 0x0, &(0x7f0000000200)) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000000)={0x0, r0, r2, 0x1, 0x3da9, '\x00', {0x8, 0x1, 0x323a, 0x8, 0xc000, 0x9, 0x5, 0x7, {0x6, 0xb}, {0x3ff, 0x4}, {0x5, 0x2}, 0x40, 0x3, 0x6, 0x3, 0x1, 0x8000, 0x7fff, 0x87d4, 0x7ff, 0x3ff, '\x00', 0x40, 0x4, 0x1, 0x31}}) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@local}, {@in6=@mcast2, 0x4d5, 0x33}, @in6=@local, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, {0x0, 0x0, 0x2000}, {0x7, 0x24, 0x6}, 0x0, 0x1, 0x2, 0x0, 0x4, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cbcmac(aes-arm)\x00'}}}, @tfcpad={0x8, 0x16, 0x400}]}, 0x144}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): munmap-getpid-process_vm_readv-add_key$keyring-mount$binderfs-keyctl$invalidate-mprotect-sendmsg$IPCTNL_MSG_EXP_NEW-socket-connect$inet6-sendto-socket-recvmmsg-socket$pptp-connect$pptp-timer_create-timer_settime-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_FASTOPEN_KEY-userfaultfd-ioctl$UFFDIO_API-mprotect-ioctl$UFFDIO_POISON-openat$selinux_enforce-openat$cgroup_ro-socket$netlink-timerfd_gettime-sendmsg$netlink detailed listing: executing program 0: munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) keyctl$invalidate(0x15, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1bc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1, 0x5ab}, 0x1c) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) socket(0x22, 0x5, 0x3ff) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xfffffffffffffeb4}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xe0, @loopback}}, 0x1e) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="f2445bb56b32f9572d83c291f38c998b", 0x10) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) ioctl$UFFDIO_POISON(r6, 0xc020aa08, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x90000, 0x0) openat$cgroup_ro(r7, &(0x7f0000000400)='freezer.self_freezing\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) timerfd_gettime(r7, &(0x7f0000000440)) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYRESOCT=r5], 0x28}], 0x1, 0x0, 0x0, 0x840}, 0x4040881) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-sendmsg$TIPC_NL_MEDIA_GET-sendmsg$nl_xfrm-syz_io_uring_setup detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x308, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2bd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1e0f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xdc, 0x3, "7882f8ca7dd75fc24a30d76547dccf1678dc3e1bf9fe2d3ca93729f75f4f9bcda65f4b24ee0c588a3e0d95b5d600d730c0758c7bb627f1e51c6f6549a0c2a64c123f65ba8387a7b4f3a9fefc87a3c7c8fde74d4ff5f0c67cb70420826dd4d7661c3af45c8c430f4a1a6b6bad27b5731af9064fa86436835d500ed2f3bbafe294c369e46303721d232d1921d19b1d3f90fcf033af19c6ffa52d3d754e509b800ee88edc94071a57a25f85ea9cee18ac4ce5c3df695c587ad932d8017d04952690ee1f79e31f21bc34146210bcee2c1647c605926792701153"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7fff, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x66}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @private2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x573}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4f2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x200488c0}, 0x40c00c1) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) syz_io_uring_setup(0xf7c, &(0x7f0000000140)={0x0, 0x8dff, 0x2, 0x1, 0x24f}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f00000002c0)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-sendmsg$TIPC_NL_MEDIA_GET-sendmsg$nl_xfrm-syz_io_uring_setup detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x308, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2bd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1e0f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xdc, 0x3, "7882f8ca7dd75fc24a30d76547dccf1678dc3e1bf9fe2d3ca93729f75f4f9bcda65f4b24ee0c588a3e0d95b5d600d730c0758c7bb627f1e51c6f6549a0c2a64c123f65ba8387a7b4f3a9fefc87a3c7c8fde74d4ff5f0c67cb70420826dd4d7661c3af45c8c430f4a1a6b6bad27b5731af9064fa86436835d500ed2f3bbafe294c369e46303721d232d1921d19b1d3f90fcf033af19c6ffa52d3d754e509b800ee88edc94071a57a25f85ea9cee18ac4ce5c3df695c587ad932d8017d04952690ee1f79e31f21bc34146210bcee2c1647c605926792701153"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7fff, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x66}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @private2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x573}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4f2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x200488c0}, 0x40c00c1) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) syz_io_uring_setup(0xf7c, &(0x7f0000000140)={0x0, 0x8dff, 0x2, 0x1, 0x24f}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f00000002c0)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-open-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-sendmsg$NL80211_CMD_SET_QOS_MAP-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-ioctl$SECCOMP_IOCTL_NOTIF_RECV-socket-socket-getpgid-getpgid-capset-fspick-ioctl$sock_SIOCGPGRP-ioctl$sock_SIOCGPGRP-openat$vga_arbiter-write$vga_arbiter-write$vga_arbiter-ptrace-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-ioctl$NILFS_IOCTL_SYNC-lsetxattr$system_posix_acl-setsockopt$netlink_NETLINK_TX_RING-ioctl$KVM_SET_CPUID detailed listing: executing program 0: open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) (async) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="20a00000", @ANYRES16=0x0, @ANYBLOB="d30228bd7000ffdbdf25680000000c0099000300000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004881}, 0x200000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x6, &(0x7f0000000200)=[{0x2, 0x5, 0xfa, 0xffffff8f}, {0x4, 0x81, 0x9, 0x4}, {0x4, 0x0, 0x40, 0x1b4}, {0x3, 0x28, 0x77}, {0x9, 0x5, 0x5, 0x3}, {0x240, 0x4, 0xc, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) getpgid(0x0) (async) r3 = getpgid(0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock l'], 0xb) (async) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock l'], 0xb) ptrace(0x4207, r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}}}}) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f00000000c0)) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x4, 0xfff, 0xf, 0xc04}, 0x10) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000300)={0x4, 0x0, [{0x80000008, 0x4, 0x2, 0x9, 0x7}, {0xa, 0x2, 0x4, 0x7, 0x4}, {0x80000019, 0x7fffffff, 0x2, 0x80000001, 0xa}, {0x80000019, 0x4f60, 0x2, 0x0, 0xfffff001}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-open-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-sendmsg$NL80211_CMD_SET_QOS_MAP-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-ioctl$SECCOMP_IOCTL_NOTIF_RECV-socket-socket-getpgid-getpgid-capset-fspick-ioctl$sock_SIOCGPGRP-ioctl$sock_SIOCGPGRP-openat$vga_arbiter-write$vga_arbiter-write$vga_arbiter-ptrace-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-ioctl$NILFS_IOCTL_SYNC-lsetxattr$system_posix_acl-setsockopt$netlink_NETLINK_TX_RING-ioctl$KVM_SET_CPUID detailed listing: executing program 0: open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) (async) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="20a00000", @ANYRES16=0x0, @ANYBLOB="d30228bd7000ffdbdf25680000000c0099000300000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004881}, 0x200000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x6, &(0x7f0000000200)=[{0x2, 0x5, 0xfa, 0xffffff8f}, {0x4, 0x81, 0x9, 0x4}, {0x4, 0x0, 0x40, 0x1b4}, {0x3, 0x28, 0x77}, {0x9, 0x5, 0x5, 0x3}, {0x240, 0x4, 0xc, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) getpgid(0x0) (async) r3 = getpgid(0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock l'], 0xb) (async) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock l'], 0xb) ptrace(0x4207, r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}}}}) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f00000000c0)) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x4, 0xfff, 0xf, 0xc04}, 0x10) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000300)={0x4, 0x0, [{0x80000008, 0x4, 0x2, 0x9, 0x7}, {0xa, 0x2, 0x4, 0x7, 0x4}, {0x80000019, 0x7fffffff, 0x2, 0x80000001, 0xa}, {0x80000019, 0x4f60, 0x2, 0x0, 0xfffff001}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_GET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r10, 0xc008ae09, &(0x7f0000000180)={0x3, 0x0, [{0x80000008, 0x9, 0x3, 0x3ff, 0x4, 0x9, 0xe}, {0xd, 0xb5b1, 0x0, 0x9, 0x7, 0x40b6, 0x4}, {0xb, 0x4, 0x4, 0x8, 0x399, 0x1, 0x2}]}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x8040ae9f, &(0x7f00000001c0)) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl single: successfully extracted reproducer found reproducer with 25 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_GET_VCPU_EVENTS detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r10, 0xc008ae09, &(0x7f0000000180)={0x3, 0x0, [{0x80000008, 0x9, 0x3, 0x3ff, 0x4, 0x9, 0xe}, {0xd, 0xb5b1, 0x0, 0x9, 0x7, 0x40b6, 0x4}, {0xb, 0x4, 0x4, 0x8, 0x399, 0x1, 0x2}]}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x8040ae9f, &(0x7f00000001c0)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r10, 0xc008ae09, &(0x7f0000000180)={0x3, 0x0, [{0x80000008, 0x9, 0x3, 0x3ff, 0x4, 0x9, 0xe}, {0xd, 0xb5b1, 0x0, 0x9, 0x7, 0x40b6, 0x4}, {0xb, 0x4, 0x4, 0x8, 0x399, 0x1, 0x2}]}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_CREATE_VCPU-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r10, 0xc008ae09, &(0x7f0000000180)={0x3, 0x0, [{0x80000008, 0x9, 0x3, 0x3ff, 0x4, 0x9, 0xe}, {0xd, 0xb5b1, 0x0, 0x9, 0x7, 0x40b6, 0x4}, {0xb, 0x4, 0x4, 0x8, 0x399, 0x1, 0x2}]}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_GET_EMULATED_CPUID-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r9, 0xc008ae09, &(0x7f0000000180)={0x3, 0x0, [{0x80000008, 0x9, 0x3, 0x3ff, 0x4, 0x9, 0xe}, {0xd, 0xb5b1, 0x0, 0x9, 0x7, 0x40b6, 0x4}, {0xb, 0x4, 0x4, 0x8, 0x399, 0x1, 0x2}]}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-openat$kvm-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800080, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$TUNDETACHFILTER-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r7, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r8, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r6) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_generic-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$TUNSETIFF-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-openat$tun-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-landlock_restrict_self-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) landlock_restrict_self(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_open_dev$usbfs-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-landlock_create_ruleset-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_open testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(&(0x7f0000002380)='./file1\x00', 0x0) program crashed: INFO: task hung in usbdev_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) creat(&(0x7f0000002380)='./file1\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(0x0, 0x0) program crashed: INFO: task hung in usbdev_ioctl extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(0x0, 0x0) program crashed: INFO: task hung in usbdev_ioctl validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(0x0, 0x0) program crashed: INFO: task hung in usbdev_ioctl validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-syz_open_dev$usbfs-syz_usb_connect-syz_usb_control_io$hid-ioctl$USBDEVFS_ALLOC_STREAMS-openat$kvm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_STRSET_GET-ioctl$KVM_CREATE_VM-setsockopt$inet6_tcp_int-ioctl$KVM_SET_VCPU_EVENTS-creat detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x5, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, 0x0, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x3, 0x10, 0x0, 0xfffffffe, 0xfc, 0x5, 0x4, 0x9, 0x3, 0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x5, 0x9, 0x6, '\x00', 0x64, 0x21}) creat(0x0, 0x0) program crashed: INFO: task hung in usbdev_ioctl validation run: crashed=true reproducing took 4h5m10.324934777s repro crashed as (corrupted=false): INFO: task syz.2.19:401 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:401 tgid:400 ppid:386 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f23ff79de59 RSP: 002b:00007f23ff5eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f23ffa25fa0 RCX: 00007f23ff79de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f23ff833e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f23ffa26038 R14: 00007f23ffa25fa0 R15: 00007ffff1bb00c8 INFO: task syz.5.18:405 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.18 state:D stack:0 pid:405 tgid:403 ppid:383 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fa123d9de59 RSP: 002b:00007fa124c4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fa124025fa0 RCX: 00007fa123d9de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007fa123e33e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa124026038 R14: 00007fa124025fa0 R15: 00007fffe5125d88 INFO: task syz.0.17:407 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:407 tgid:406 ppid:382 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f2e7c79de59 RSP: 002b:00007f2e7d700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f2e7ca25fa0 RCX: 00007f2e7c79de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f2e7c833e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2e7ca26038 R14: 00007f2e7ca25fa0 R15: 00007fff9f3a06f8 INFO: task syz.3.20:410 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:0 pid:410 tgid:409 ppid:387 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fae6615e68e RSP: 002b:00007fae66ffcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fae66ffd6c0 RCX: 00007fae6615e68e RDX: 0000000000008001 RSI: 00007fae66ffcc00 RDI: ffffffffffffff9c RBP: 00007fae66ffcc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007fae66426038 R14: 00007fae66425fa0 R15: 00007ffd33e535c8 INFO: task syz.6.21:451 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.6.21 state:D stack:0 pid:451 tgid:450 ppid:432 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f81e675e68e RSP: 002b:00007f81e76ccb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f81e76cd6c0 RCX: 00007f81e675e68e RDX: 0000000000008001 RSI: 00007f81e76ccc00 RDI: ffffffffffffff9c RBP: 00007f81e76ccc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f81e6a26038 R14: 00007f81e6a25fa0 R15: 00007ffc5274f248 INFO: task syz.8.23:454 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.23 state:D stack:0 pid:454 tgid:453 ppid:436 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff579b5e68e RSP: 002b:00007ff57aa20b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ff57aa216c0 RCX: 00007ff579b5e68e RDX: 0000000000008001 RSI: 00007ff57aa20c00 RDI: ffffffffffffff9c RBP: 00007ff57aa20c00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007ff579e26038 R14: 00007ff579e25fa0 R15: 00007ffe50ccb7c8 INFO: task syz.9.24:458 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.9.24 state:D stack:0 pid:458 tgid:455 ppid:437 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff443f5e68e RSP: 002b:00007ff444e7db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ff444e7e6c0 RCX: 00007ff443f5e68e RDX: 0000000000008001 RSI: 00007ff444e7dc00 RDI: ffffffffffffff9c RBP: 00007ff444e7dc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007ff444226038 R14: 00007ff444225fa0 R15: 00007ffc298f0618 INFO: task syz.7.22:457 blocked for more than 125 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.22 state:D stack:0 pid:457 tgid:456 ppid:434 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f8f1275e68e RSP: 002b:00007f8f136cab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f8f136cb6c0 RCX: 00007f8f1275e68e RDX: 0000000000008001 RSI: 00007f8f136cac00 RDI: ffffffffffffff9c RBP: 00007f8f136cac00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f8f12a26038 R14: 00007f8f12a25fa0 R15: 00007ffcf3da9728 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 475 Comm: kworker/1:10 Not tainted syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker RIP: 0010:chacha_block_generic+0x11/0xdb0 lib/crypto/chacha.c:77 Code: cc cc cc cc cc cc cc cc cc b8 12 69 7d 3e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 <48> 83 e4 e0 48 81 ec c0 00 00 00 89 54 24 14 49 89 f4 49 89 ff 65 RSP: 0018:ffffc900007df228 EFLAGS: 00000293 RAX: ffffffff82b29a98 RBX: 0000000000000020 RCX: ffff88810e7e4c00 RDX: 0000000000000014 RSI: ffffc900007df2a0 RDI: ffffc900007df590 RBP: ffffc900007df250 R08: ffffc900007df2df R09: 0000000000000000 R10: ffffc900007df2a0 R11: fffff520000fbe5c R12: dffffc0000000000 R13: 1ffff920000fbe50 R14: ffff888008b93000 R15: ffffc900007df660 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555577e8a4e8 CR3: 000000010cf72000 CR4: 00000000003526b0 Call Trace: chacha_crypt_generic+0x85b/0x8d0 lib/crypto/libchacha.c:29 chacha_crypt_arch+0xaa/0xe0 arch/x86/crypto/chacha_glue.c:147 chacha_crypt include/crypto/chacha.h:100 [inline] chacha20_crypt include/crypto/chacha.h:108 [inline] chacha20poly1305_crypt_sg_inplace+0x483/0xc00 lib/crypto/chacha20poly1305.c:245 chacha20poly1305_encrypt_sg_inplace+0x44/0x70 lib/crypto/chacha20poly1305.c:338 encrypt_packet drivers/net/wireguard/send.c:216 [inline] wg_packet_encrypt_worker+0x935/0x16c0 drivers/net/wireguard/send.c:297 process_one_work kernel/workqueue.c:3273 [inline] process_scheduled_works+0x7f7/0x1060 kernel/workqueue.c:3354 worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): INFO: task syz.2.19:401 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:401 tgid:400 ppid:386 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f23ff79de59 RSP: 002b:00007f23ff5eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f23ffa25fa0 RCX: 00007f23ff79de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f23ff833e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f23ffa26038 R14: 00007f23ffa25fa0 R15: 00007ffff1bb00c8 INFO: task syz.5.18:405 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.18 state:D stack:0 pid:405 tgid:403 ppid:383 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fa123d9de59 RSP: 002b:00007fa124c4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fa124025fa0 RCX: 00007fa123d9de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007fa123e33e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa124026038 R14: 00007fa124025fa0 R15: 00007fffe5125d88 INFO: task syz.0.17:407 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:407 tgid:406 ppid:382 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f2e7c79de59 RSP: 002b:00007f2e7d700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f2e7ca25fa0 RCX: 00007f2e7c79de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f2e7c833e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2e7ca26038 R14: 00007f2e7ca25fa0 R15: 00007fff9f3a06f8 INFO: task syz.3.20:410 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:0 pid:410 tgid:409 ppid:387 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fae6615e68e RSP: 002b:00007fae66ffcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fae66ffd6c0 RCX: 00007fae6615e68e RDX: 0000000000008001 RSI: 00007fae66ffcc00 RDI: ffffffffffffff9c RBP: 00007fae66ffcc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007fae66426038 R14: 00007fae66425fa0 R15: 00007ffd33e535c8 INFO: task syz.6.21:451 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.6.21 state:D stack:0 pid:451 tgid:450 ppid:432 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f81e675e68e RSP: 002b:00007f81e76ccb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f81e76cd6c0 RCX: 00007f81e675e68e RDX: 0000000000008001 RSI: 00007f81e76ccc00 RDI: ffffffffffffff9c RBP: 00007f81e76ccc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f81e6a26038 R14: 00007f81e6a25fa0 R15: 00007ffc5274f248 INFO: task syz.8.23:454 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.23 state:D stack:0 pid:454 tgid:453 ppid:436 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff579b5e68e RSP: 002b:00007ff57aa20b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ff57aa216c0 RCX: 00007ff579b5e68e RDX: 0000000000008001 RSI: 00007ff57aa20c00 RDI: ffffffffffffff9c RBP: 00007ff57aa20c00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007ff579e26038 R14: 00007ff579e25fa0 R15: 00007ffe50ccb7c8 INFO: task syz.9.24:458 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.9.24 state:D stack:0 pid:458 tgid:455 ppid:437 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff443f5e68e RSP: 002b:00007ff444e7db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ff444e7e6c0 RCX: 00007ff443f5e68e RDX: 0000000000008001 RSI: 00007ff444e7dc00 RDI: ffffffffffffff9c RBP: 00007ff444e7dc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007ff444226038 R14: 00007ff444225fa0 R15: 00007ffc298f0618 INFO: task syz.7.22:457 blocked for more than 125 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.22 state:D stack:0 pid:457 tgid:456 ppid:434 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6054 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7867 __schedule_loop kernel/sched/core.c:7944 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7959 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8016 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_open+0x156/0x840 drivers/usb/core/devio.c:1051 chrdev_open+0x4e8/0x610 fs/char_dev.c:414 do_dentry_open+0x97f/0x1510 fs/open.c:960 vfs_open+0x86/0x240 fs/open.c:1092 do_open fs/namei.c:3782 [inline] path_openat+0x2c49/0x35a0 fs/namei.c:3941 do_filp_open+0x1f2/0x440 fs/namei.c:3968 do_sys_openat2+0x134/0x1d0 fs/open.c:1440 do_sys_open fs/open.c:1455 [inline] __do_sys_openat fs/open.c:1471 [inline] __se_sys_openat fs/open.c:1466 [inline] __x64_sys_openat+0x13a/0x170 fs/open.c:1466 x64_sys_call+0xe69/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f8f1275e68e RSP: 002b:00007f8f136cab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f8f136cb6c0 RCX: 00007f8f1275e68e RDX: 0000000000008001 RSI: 00007f8f136cac00 RDI: ffffffffffffff9c RBP: 00007f8f136cac00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f8f12a26038 R14: 00007f8f12a25fa0 R15: 00007ffcf3da9728 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 475 Comm: kworker/1:10 Not tainted syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker RIP: 0010:chacha_block_generic+0x11/0xdb0 lib/crypto/chacha.c:77 Code: cc cc cc cc cc cc cc cc cc b8 12 69 7d 3e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 <48> 83 e4 e0 48 81 ec c0 00 00 00 89 54 24 14 49 89 f4 49 89 ff 65 RSP: 0018:ffffc900007df228 EFLAGS: 00000293 RAX: ffffffff82b29a98 RBX: 0000000000000020 RCX: ffff88810e7e4c00 RDX: 0000000000000014 RSI: ffffc900007df2a0 RDI: ffffc900007df590 RBP: ffffc900007df250 R08: ffffc900007df2df R09: 0000000000000000 R10: ffffc900007df2a0 R11: fffff520000fbe5c R12: dffffc0000000000 R13: 1ffff920000fbe50 R14: ffff888008b93000 R15: ffffc900007df660 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555577e8a4e8 CR3: 000000010cf72000 CR4: 00000000003526b0 Call Trace: chacha_crypt_generic+0x85b/0x8d0 lib/crypto/libchacha.c:29 chacha_crypt_arch+0xaa/0xe0 arch/x86/crypto/chacha_glue.c:147 chacha_crypt include/crypto/chacha.h:100 [inline] chacha20_crypt include/crypto/chacha.h:108 [inline] chacha20poly1305_crypt_sg_inplace+0x483/0xc00 lib/crypto/chacha20poly1305.c:245 chacha20poly1305_encrypt_sg_inplace+0x44/0x70 lib/crypto/chacha20poly1305.c:338 encrypt_packet drivers/net/wireguard/send.c:216 [inline] wg_packet_encrypt_worker+0x935/0x16c0 drivers/net/wireguard/send.c:297 process_one_work kernel/workqueue.c:3273 [inline] process_scheduled_works+0x7f7/0x1060 kernel/workqueue.c:3354 worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244