Extracting prog: 3h53m47.769194192s
Minimizing prog: 56m54.014026855s
Simplifying prog options: 0s
Extracting C: 49.913342875s
Simplifying C: 13m34.021140282s


extracting reproducer from 85 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-openat-write-mkdirat-mkdirat-symlinkat-openat-write-nanosleep-nanosleep-nanosleep-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 85 programs with base timeout 30s
testing program (duration=51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [34, 4, 8, 12, 20, 15, 13, 7, 10, 10, 10, 27, 22, 2, 16, 12, 17, 8, 4, 8, 11, 27, 29, 6, 4, 29, 3, 31, 12, 2, 6, 20, 15, 6, 6, 4, 11, 10, 31, 10, 4, 6, 4, 13, 4, 11, 4, 10, 8, 31, 8, 18, 3, 4, 12, 4, 12, 4, 4, 4, 12, 11, 4, 15, 12, 17, 6, 6, 4, 10, 1, 29, 4, 6, 5, 5, 11, 9, 22, 16, 2, 14, 30, 9, 19]
detailed listing:
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6)
r3 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000100), 0x11, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r5 = syz_open_dev$video(&(0x7f0000000100), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r6 = syz_open_dev$video(&(0x7f0000000100), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r7 = syz_open_dev$video(&(0x7f0000000100), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 33:
syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x0, 0x3}})
executing program 34:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0xffffffff\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0xffffffff\x00', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='disk\n', 0x5)
executing program 35:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
read$hidraw(r1, &(0x7f0000000800), 0x9)
executing program 36:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x6}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r2, &(0x7f0000000700)='auto\x00', 0x4)
write(r3, &(0x7f0000000700)='auto\x00', 0x4)
write(r4, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
write(r2, &(0x7f0000000800)='on\x00', 0x2)
write(r3, &(0x7f0000000800)='on\x00', 0x2)
write(r4, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 8:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x1000)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
r2 = eventfd(0x0)
write(r2, &(0x7f0000001000)="0100000000000000", 0x8)
write(r2, &(0x7f0000001008)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2})
write(r2, &(0x7f00000001a0)="0100000000000000", 0x8)
executing program 37:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={<r2=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={<r3=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1286, 0x1fa4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000200)=""/6) (async)
syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000300)='\x00\x00') (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='mem\x00', 0x4)
executing program 8:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001000)={0x15, 0x110, 0x0, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120)
executing program 38:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0xbebc200}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write(r1, &(0x7f0000000200)="03000000480000fa0200000000000000000000000000000000000000000000000000000002000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e8030000", 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 39:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001000)={0x15, 0x110, 0x0, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120)
executing program 40:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000100)="02fa", 0x2)
write(r0, &(0x7f0000000102)="02ff", 0x2)
write(r0, &(0x7f0000000104)="0247", 0x2)
write(r0, &(0x7f0000000106)="0280", 0x2)
nanosleep(&(0x7f0000000210)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000108)="02fa", 0x2)
write(r0, &(0x7f000000010a)="02ff", 0x2)
write(r0, &(0x7f000000010c)="0247", 0x2)
write(r0, &(0x7f000000010e)="0280", 0x2)
nanosleep(&(0x7f0000000220)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000110)="02fa", 0x2)
write(r0, &(0x7f0000000112)="02ff", 0x2)
write(r0, &(0x7f0000000114)="0247", 0x2)
write(r0, &(0x7f0000000116)="0280", 0x2)
nanosleep(&(0x7f0000000240)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio0/protocol\x00', 0x2, 0x0)
write(r1, &(0x7f0000000440)='synaptics\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0)
write(r2, &(0x7f0000000440)='synaptics\x00', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio2/protocol\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='synaptics\x00', 0xa)
executing program 41:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000340)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
r0 = syz_usb_connect(0x5, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004000000000000001020001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x1, 0x4, &(0x7f0000000100)='\x00\x00\x00\x00')
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x81ff, 0x900)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./ram0\x00', 0x81ff, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./ram0\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='raid1\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0)
write(r2, &(0x7f0000000900)='1:0\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r3, &(0x7f0000000b00)='0\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000d00)='active\x00', 0x6)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='add syz0 127.0.0.1\n', 0x13)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
close(r1)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000280)='\x00\x00TO', 0x4, 0x40)
pwrite64(r2, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4, 0x44)
pwrite64(r2, &(0x7f0000000300)="00b48b22", 0x4, 0x48)
pwrite64(r2, &(0x7f0000000340)="e800f00f", 0x4, 0x4c)
pwrite64(r2, &(0x7f0000000380)="2000f01f", 0x4, 0x50)
pwrite64(r2, &(0x7f00000003c0)="00040000", 0x4, 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r4 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
executing program 42:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\x00', 0x4)
executing program 43:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
executing program 44:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2})
write(r2, &(0x7f00000001a0)="0100000000000000", 0x8)
executing program 8:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x49})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @loopback}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000000840)='/tmp\n\x00', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='10\n\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='10\n\x00', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r5, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r6, &(0x7f0000000240)='1\n\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r7, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 8:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x73}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x8a}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0x20}, 0x2)
executing program 45:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty, 0xd}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120)
executing program 46:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000210)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='mem\n', 0x4)
executing program 47:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x73}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x8a}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0x20}, 0x2)
executing program 4:
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff})
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0, 0x1000}}, 0x1)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1000, 0x3, 0x11, r0, 0x20000000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=44bsd\x00')
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr_list\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x7c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='1\x00', 0x2)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)
executing program 5:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/mmc0/err_stats\x00', 0x0, 0x0)
executing program 48:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 49:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='disk', 0x4)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 5:
r0 = syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 5:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/256, 0x100)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='tpm_crb_acpi\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/tpm_crb_acpi/bind\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='QEMU0002:00\x00', 0xc)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/create_on_open\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/256, 0x100)
executing program 9:
pipe2$9p(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xc8000, 0x8, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x3fff, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1000, 0x8}}, 0xa0)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000}}, 0x43)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000000300)='data', 0x4)
executing program 9:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 50:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)='saa7115 0x21\x00', 0xd)
executing program 51:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 52:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:00.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180), 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='00:04\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='disable\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/drivers/parport_pc/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='00:05\n', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='disable\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pnp/drivers/floppy/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='00:06\n', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pnp/devices/00:06/resources\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)='disable\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='00:02\n', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0)
write(r7, &(0x7f0000000100)='disable\n', 0x8)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 8:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 53:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70100000000000085000000ad000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0xc, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0xc, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1)
executing program 7:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
write(r0, &(0x7f0000001040)="0101", 0x2)
write(r0, &(0x7f0000001080)='\x00\x00', 0x2)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
executing program 2:
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 7:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6)
syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0)
syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r3 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 6:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r2, 0x1}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-openat-write-mkdirat-mkdirat-symlinkat-openat-write-nanosleep-nanosleep-nanosleep-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 85 programs with base timeout 1m40s
testing program (duration=2m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [34, 4, 8, 12, 20, 15, 13, 7, 10, 10, 10, 27, 22, 2, 16, 12, 17, 8, 4, 8, 11, 27, 29, 6, 4, 29, 3, 31, 12, 2, 6, 20, 15, 6, 6, 4, 11, 10, 31, 10, 4, 6, 4, 13, 4, 11, 4, 10, 8, 31, 8, 18, 3, 4, 12, 4, 12, 4, 4, 4, 12, 11, 4, 15, 12, 17, 6, 6, 4, 10, 1, 29, 4, 6, 5, 5, 11, 9, 22, 16, 2, 14, 30, 9, 19]
detailed listing:
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6)
r3 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000100), 0x11, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r5 = syz_open_dev$video(&(0x7f0000000100), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r6 = syz_open_dev$video(&(0x7f0000000100), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r7 = syz_open_dev$video(&(0x7f0000000100), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 33:
syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x0, 0x3}})
executing program 34:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0xffffffff\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0xffffffff\x00', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='disk\n', 0x5)
executing program 35:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
read$hidraw(r1, &(0x7f0000000800), 0x9)
executing program 36:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x6}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r2, &(0x7f0000000700)='auto\x00', 0x4)
write(r3, &(0x7f0000000700)='auto\x00', 0x4)
write(r4, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
write(r2, &(0x7f0000000800)='on\x00', 0x2)
write(r3, &(0x7f0000000800)='on\x00', 0x2)
write(r4, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 8:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x1000)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
r2 = eventfd(0x0)
write(r2, &(0x7f0000001000)="0100000000000000", 0x8)
write(r2, &(0x7f0000001008)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2})
write(r2, &(0x7f00000001a0)="0100000000000000", 0x8)
executing program 37:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={<r2=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={<r3=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1286, 0x1fa4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000200)=""/6) (async)
syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000300)='\x00\x00') (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='mem\x00', 0x4)
executing program 8:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001000)={0x15, 0x110, 0x0, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120)
executing program 38:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0xbebc200}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write(r1, &(0x7f0000000200)="03000000480000fa0200000000000000000000000000000000000000000000000000000002000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e8030000", 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 39:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001000)={0x15, 0x110, 0x0, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120)
executing program 40:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000100)="02fa", 0x2)
write(r0, &(0x7f0000000102)="02ff", 0x2)
write(r0, &(0x7f0000000104)="0247", 0x2)
write(r0, &(0x7f0000000106)="0280", 0x2)
nanosleep(&(0x7f0000000210)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000108)="02fa", 0x2)
write(r0, &(0x7f000000010a)="02ff", 0x2)
write(r0, &(0x7f000000010c)="0247", 0x2)
write(r0, &(0x7f000000010e)="0280", 0x2)
nanosleep(&(0x7f0000000220)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000110)="02fa", 0x2)
write(r0, &(0x7f0000000112)="02ff", 0x2)
write(r0, &(0x7f0000000114)="0247", 0x2)
write(r0, &(0x7f0000000116)="0280", 0x2)
nanosleep(&(0x7f0000000240)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio0/protocol\x00', 0x2, 0x0)
write(r1, &(0x7f0000000440)='synaptics\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0)
write(r2, &(0x7f0000000440)='synaptics\x00', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio2/protocol\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='synaptics\x00', 0xa)
executing program 41:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000340)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
r0 = syz_usb_connect(0x5, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004000000000000001020001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x1, 0x4, &(0x7f0000000100)='\x00\x00\x00\x00')
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x81ff, 0x900)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./ram0\x00', 0x81ff, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./ram0\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='raid1\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0)
write(r2, &(0x7f0000000900)='1:0\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r3, &(0x7f0000000b00)='0\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000d00)='active\x00', 0x6)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='add syz0 127.0.0.1\n', 0x13)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
close(r1)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000280)='\x00\x00TO', 0x4, 0x40)
pwrite64(r2, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4, 0x44)
pwrite64(r2, &(0x7f0000000300)="00b48b22", 0x4, 0x48)
pwrite64(r2, &(0x7f0000000340)="e800f00f", 0x4, 0x4c)
pwrite64(r2, &(0x7f0000000380)="2000f01f", 0x4, 0x50)
pwrite64(r2, &(0x7f00000003c0)="00040000", 0x4, 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r4 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
executing program 42:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\x00', 0x4)
executing program 43:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
executing program 44:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2})
write(r2, &(0x7f00000001a0)="0100000000000000", 0x8)
executing program 8:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x49})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @loopback}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000000840)='/tmp\n\x00', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='10\n\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='10\n\x00', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r5, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r6, &(0x7f0000000240)='1\n\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r7, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 8:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x73}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x8a}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0x20}, 0x2)
executing program 45:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty, 0xd}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120)
executing program 46:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000210)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='mem\n', 0x4)
executing program 47:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x73}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x8a}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0x20}, 0x2)
executing program 4:
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff})
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0, 0x1000}}, 0x1)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1000, 0x3, 0x11, r0, 0x20000000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=44bsd\x00')
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr_list\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x7c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='1\x00', 0x2)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)
executing program 5:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/mmc0/err_stats\x00', 0x0, 0x0)
executing program 48:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 49:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='disk', 0x4)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 5:
r0 = syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 5:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/256, 0x100)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='tpm_crb_acpi\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/tpm_crb_acpi/bind\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='QEMU0002:00\x00', 0xc)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/create_on_open\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/256, 0x100)
executing program 9:
pipe2$9p(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xc8000, 0x8, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x3fff, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1000, 0x8}}, 0xa0)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000}}, 0x43)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000000300)='data', 0x4)
executing program 9:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 50:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)='saa7115 0x21\x00', 0xd)
executing program 51:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 52:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:00.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180), 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='00:04\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='disable\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/drivers/parport_pc/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='00:05\n', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='disable\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pnp/drivers/floppy/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='00:06\n', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pnp/devices/00:06/resources\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)='disable\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='00:02\n', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0)
write(r7, &(0x7f0000000100)='disable\n', 0x8)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 8:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 53:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70100000000000085000000ad000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0xc, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0xc, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1)
executing program 7:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
write(r0, &(0x7f0000001040)="0101", 0x2)
write(r0, &(0x7f0000001080)='\x00\x00', 0x2)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
executing program 2:
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 7:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6)
syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0)
syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r3 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 6:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r2, 0x1}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-openat-write-mkdirat-mkdirat-symlinkat-openat-write-nanosleep-nanosleep-nanosleep-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 85 programs with base timeout 6m0s
testing program (duration=6m21s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [34, 4, 8, 12, 20, 15, 13, 7, 10, 10, 10, 27, 22, 2, 16, 12, 17, 8, 4, 8, 11, 27, 29, 6, 4, 29, 3, 31, 12, 2, 6, 20, 15, 6, 6, 4, 11, 10, 31, 10, 4, 6, 4, 13, 4, 11, 4, 10, 8, 31, 8, 18, 3, 4, 12, 4, 12, 4, 4, 4, 12, 11, 4, 15, 12, 17, 6, 6, 4, 10, 1, 29, 4, 6, 5, 5, 11, 9, 22, 16, 2, 14, 30, 9, 19]
detailed listing:
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6)
r3 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000100), 0x11, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r5 = syz_open_dev$video(&(0x7f0000000100), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r6 = syz_open_dev$video(&(0x7f0000000100), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r7 = syz_open_dev$video(&(0x7f0000000100), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 33:
syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x0, 0x3}})
executing program 34:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0xffffffff\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0xffffffff\x00', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='disk\n', 0x5)
executing program 35:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200))
r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000")
read$hidraw(r1, &(0x7f0000000800), 0x9)
executing program 36:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x6}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r2, &(0x7f0000000700)='auto\x00', 0x4)
write(r3, &(0x7f0000000700)='auto\x00', 0x4)
write(r4, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
write(r2, &(0x7f0000000800)='on\x00', 0x2)
write(r3, &(0x7f0000000800)='on\x00', 0x2)
write(r4, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 8:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x1000)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
r2 = eventfd(0x0)
write(r2, &(0x7f0000001000)="0100000000000000", 0x8)
write(r2, &(0x7f0000001008)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2})
write(r2, &(0x7f00000001a0)="0100000000000000", 0x8)
executing program 37:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0)
nanosleep(&(0x7f0000000d00)={0x1}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={<r2=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={<r3=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1286, 0x1fa4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000200)=""/6) (async)
syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000300)='\x00\x00') (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='mem\x00', 0x4)
executing program 8:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001000)={0x15, 0x110, 0x0, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120)
executing program 38:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0xbebc200}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write(r1, &(0x7f0000000200)="03000000480000fa0200000000000000000000000000000000000000000000000000000002000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e8030000", 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 39:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001000)={0x15, 0x110, 0x0, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120)
executing program 40:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000100)="02fa", 0x2)
write(r0, &(0x7f0000000102)="02ff", 0x2)
write(r0, &(0x7f0000000104)="0247", 0x2)
write(r0, &(0x7f0000000106)="0280", 0x2)
nanosleep(&(0x7f0000000210)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000108)="02fa", 0x2)
write(r0, &(0x7f000000010a)="02ff", 0x2)
write(r0, &(0x7f000000010c)="0247", 0x2)
write(r0, &(0x7f000000010e)="0280", 0x2)
nanosleep(&(0x7f0000000220)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000110)="02fa", 0x2)
write(r0, &(0x7f0000000112)="02ff", 0x2)
write(r0, &(0x7f0000000114)="0247", 0x2)
write(r0, &(0x7f0000000116)="0280", 0x2)
nanosleep(&(0x7f0000000240)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio0/protocol\x00', 0x2, 0x0)
write(r1, &(0x7f0000000440)='synaptics\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0)
write(r2, &(0x7f0000000440)='synaptics\x00', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio2/protocol\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='synaptics\x00', 0xa)
executing program 41:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000340)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
r0 = syz_usb_connect(0x5, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004000000000000001020001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x1, 0x4, &(0x7f0000000100)='\x00\x00\x00\x00')
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x81ff, 0x900)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./ram0\x00', 0x81ff, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./ram0\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='raid1\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0)
write(r2, &(0x7f0000000900)='1:0\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r3, &(0x7f0000000b00)='0\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000d00)='active\x00', 0x6)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='add syz0 127.0.0.1\n', 0x13)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
close(r1)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000280)='\x00\x00TO', 0x4, 0x40)
pwrite64(r2, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4, 0x44)
pwrite64(r2, &(0x7f0000000300)="00b48b22", 0x4, 0x48)
pwrite64(r2, &(0x7f0000000340)="e800f00f", 0x4, 0x4c)
pwrite64(r2, &(0x7f0000000380)="2000f01f", 0x4, 0x50)
pwrite64(r2, &(0x7f00000003c0)="00040000", 0x4, 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r4 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
executing program 42:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\x00', 0x4)
executing program 43:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1})
executing program 44:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100})
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2})
write(r2, &(0x7f00000001a0)="0100000000000000", 0x8)
executing program 8:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x49})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @loopback}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000000840)='/tmp\n\x00', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='10\n\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='10\n\x00', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r5, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r6, &(0x7f0000000240)='1\n\x00', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r7, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 8:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x73}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x8a}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0x20}, 0x2)
executing program 45:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty, 0xd}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120)
executing program 46:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000210)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='mem\n', 0x4)
executing program 47:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x73}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x64}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x8a}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0x20}, 0x2)
executing program 4:
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff})
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0, 0x1000}}, 0x1)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1000, 0x3, 0x11, r0, 0x20000000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=44bsd\x00')
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr_list\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x7c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='1\x00', 0x2)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)
executing program 5:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/mmc0/err_stats\x00', 0x0, 0x0)
executing program 48:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 49:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='disk', 0x4)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 5:
r0 = syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 5:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/256, 0x100)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='tpm_crb_acpi\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/tpm_crb_acpi/bind\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='QEMU0002:00\x00', 0xc)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/create_on_open\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/256, 0x100)
executing program 9:
pipe2$9p(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xc8000, 0x8, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x3fff, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1000, 0x8}}, 0xa0)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000}}, 0x43)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000000300)='data', 0x4)
executing program 9:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 50:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)='saa7115 0x21\x00', 0xd)
executing program 51:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 52:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:00.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180), 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='00:04\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='disable\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/drivers/parport_pc/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='00:05\n', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='disable\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pnp/drivers/floppy/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='00:06\n', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pnp/devices/00:06/resources\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)='disable\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='00:02\n', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0)
write(r7, &(0x7f0000000100)='disable\n', 0x8)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 8:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 53:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70100000000000085000000ad000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0xc, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0xc, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1)
executing program 7:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
write(r0, &(0x7f0000001040)="0101", 0x2)
write(r0, &(0x7f0000001080)='\x00\x00', 0x2)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
executing program 2:
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 7:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6)
syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0)
syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r3 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 6:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r2, 0x1}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: no output from test machine
bisect: bisecting 85 programs
bisect: split chunks (needed=false): <84>
bisect: split chunk #0 of len 84 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m14s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 2, 6, 20, 15, 6, 6, 4, 11, 10, 31, 10, 4, 6, 4, 13, 4, 11, 4, 10, 8, 31, 8, 18, 3, 4, 12, 4, 12, 4, 4, 4, 12, 11, 4, 15, 12, 17, 6, 6, 4, 10, 1, 29, 4, 6, 5, 5, 11, 9, 22, 16, 2, 14, 30, 9, 19]
detailed listing:
executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=44bsd\x00')
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr_list\x00', 0x1, 0x0)
write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x7c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)='1\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='1\x00', 0x2)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff)
executing program 5:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/mmc0/err_stats\x00', 0x0, 0x0)
executing program 48:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freezes\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='freeze\n1', 0x8)
executing program 49:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='disk', 0x4)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 5:
r0 = syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 5:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/256, 0x100)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='tpm_crb_acpi\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/tpm_crb_acpi/bind\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='QEMU0002:00\x00', 0xc)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/create_on_open\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/256, 0x100)
executing program 9:
pipe2$9p(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xc8000, 0x8, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x3fff, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1000, 0x8}}, 0xa0)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000}}, 0x43)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000000300)='data', 0x4)
executing program 9:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 50:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)='saa7115 0x21\x00', 0xd)
executing program 51:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], &(0x7f0000000100)=""/4096, 0x0, 0x1000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20)
executing program 52:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async)
write$nci(r0, &(0x7f00000006c0)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0100"}, 0x5)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:00.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180), 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='7777\x00', 0x4)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='512\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='255\x00', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0)
write(r5, &(0x7f00000004c0)='1\x00', 0x1)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r6, 0x0, 0x0, 0x100000)
mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0)
write(r8, &(0x7f00000005c0)='7340032\x00', 0x7)
close(r8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='00:04\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='disable\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/drivers/parport_pc/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='00:05\n', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='disable\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pnp/drivers/floppy/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='00:06\n', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pnp/devices/00:06/resources\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)='disable\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='00:02\n', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0)
write(r7, &(0x7f0000000100)='disable\n', 0x8)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x30}}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 8:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 53:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mem\x00', 0x3)
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70100000000000085000000ad000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0xc, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0xc, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1)
executing program 7:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
write(r0, &(0x7f0000001040)="0101", 0x2)
write(r0, &(0x7f0000001080)='\x00\x00', 0x2)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
executing program 2:
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 7:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6)
syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0)
syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r3 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 6:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r2, 0x1}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: no output from test machine
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 4, 4, 4, 12, 11, 4, 15, 12, 17, 6, 6, 4, 10, 1, 29, 4, 6, 5, 5, 11, 9, 22, 16, 2, 14, 30, 9, 19]
detailed listing:
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70100000000000085000000ad000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0xc, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0xc, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1)
executing program 7:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
write(r0, &(0x7f0000001040)="0101", 0x2)
write(r0, &(0x7f0000001080)='\x00\x00', 0x2)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
executing program 2:
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 7:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6)
syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0)
syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r3 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 6:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r2, 0x1}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-openat-write-mkdirat-mkdirat-symlinkat-openat-write-nanosleep-nanosleep-nanosleep-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi-syz_open_dev$sndmidi-write$midi
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
bisect: split chunks (needed=true): <28>
bisect: split chunk #0 of len 28 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 29, 4, 6, 5, 5, 11, 9, 22, 16, 2, 14, 30, 9, 19]
detailed listing:
executing program 7:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70100000000000085000000ad000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0xc, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0xc, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0xc, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1)
executing program 7:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
write(r0, &(0x7f0000001040)="0101", 0x2)
write(r0, &(0x7f0000001080)='\x00\x00', 0x2)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
executing program 2:
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 7:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000300)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6)
syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0)
syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r3 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
r4 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
executing program 6:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r2, 0x1}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 4, 4, 4, 12, 11, 4, 15, 12, 17, 6, 6, 4, 10, 19]
detailed listing:
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: no output from test machine
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <14>
bisect: split chunk #0 of len 14 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 12, 17, 6, 6, 4, 10, 19]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010030000904000000010130000a2401003d00000000000c240a030300000000000000142402010102000300000000010000000000000013240302010300010300000000000000000000090401000001023000090401010101023000172401020000000001000100000000000000021000000006240201021009050109c0000100000a250100000000000000090402000001023000090402010101023000172401010000000001000100000000000000021000000006240201021009058209c0000100000a250100000000000000"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x5, 0x9, "090002060000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x6, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x7, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x8, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x9, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0xa, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
accept(r2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x1dcd6500}, 0x0)
executing program 6:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0})
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0)
read(r1, &(0x7f0000000600)=""/64, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/64, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0)
read(r3, &(0x7f0000000600)=""/64, 0x40)
executing program 1:
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f00000001c0)="f100040000", 0x5)
executing program 7:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000500)={0x2}, 0x0)
executing program 2:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r0, 0x5514)
executing program 6:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r2=>0x0, &(0x7f0000001108)=<r3=>0x0, &(0x7f0000001110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000d00)=ANY=[@ANYBLOB='#127.0.0.1:syz0\x00'], &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 4, 4, 4, 12, 11, 4, 19]
detailed listing:
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <7>
bisect: split chunk #0 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 11, 4, 19]
detailed listing:
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 4, 4, 4, 19]
detailed listing:
executing program 54:
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0f0b"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r5, &(0x7f0000c00000)=""/4194304, 0x400000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
bisect: split chunks (needed=true): <4>, <3>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 12, 11, 4, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 4, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 56:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 12, 11, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 12, 11, 19]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n\x00', 0x6)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 12, 11, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @local}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
bisect: the chunk can be dropped
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 11, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 3 programs left: 

executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)


bisect: trying to concatenate
bisect: concatenate 3 entries
minimizing program #0 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 19]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 19]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 19]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 19]
detailed listing:
executing program 0:
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
minimized 4 calls -> 4 calls
minimizing program #1 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 10, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
write(0xffffffffffffffff, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3, 19]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 0:
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)
write$midi(r4, &(0x7f00000004c0)='hello', 0x5)

program did not crash
minimized 11 calls -> 4 calls
minimizing program #2 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 18]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)
syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x2)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 17]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)
write$midi(r3, &(0x7f0000000440)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 16]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)
syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x2)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 15]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)
write$midi(r2, &(0x7f00000003c0)='hello', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 14]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x2)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 13]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 12]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 11]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 10]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='dummy_udc.0\n', 0xc)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 9]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 8]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 7]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 6]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 5]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x01\n', 0x5)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 4]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 3]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 2]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 1]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)

program crashed: WARNING in __set_task_frozen
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 0]
detailed listing:
executing program 55:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
executing program 0:

program crashed: WARNING in __set_task_frozen
minimized 19 calls -> 0 calls
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program crashed: WARNING in __set_task_frozen
bisect: concatenation succeeded
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program crashed: WARNING in __set_task_frozen
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)

program did not crash
testing program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m1.067519998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program crashed: WARNING in __set_task_frozen
simplifying C reproducer
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program crashed: WARNING in __set_task_frozen
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program did not crash
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program crashed: WARNING in __set_task_frozen
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program crashed: WARNING in __set_task_frozen
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program did not crash
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program crashed: WARNING in __set_task_frozen
testing compiled C program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program crashed: WARNING in __set_task_frozen
testing program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program crashed: WARNING in __set_task_frozen
validation run: crashed=true
testing program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program crashed: WARNING in __set_task_frozen
validation run: crashed=true
testing program (duration=2m1.067519998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='mem', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)

program crashed: WARNING in __set_task_frozen
validation run: crashed=true
reproducing took 5h12m15.937714248s
repro crashed as (corrupted=false):
Freezing user space processes
------------[ cut here ]------------
debug_locks && p->lockdep_depth
WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340 kernel/freezer.c:139, CPU#1: syz.3.20/6013
Modules linked in:
CPU: 1 UID: 0 PID: 6013 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__set_task_frozen+0x260/0x340 kernel/freezer.c:139
Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff
RSP: 0018:ffffc9000420f9f0 EFLAGS: 00010093
RAX: ffffffff81b0b75f RBX: ffff88805cd8dd00 RCX: ffff8880348fdd00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88805cd8dd18
R13: 1ffff1100b9b1ba3 R14: 0000000000000000 R15: ffff88805cd8e900
FS:  000055557f27c500(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5669260218 CR3: 0000000035cd8000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 task_call_func+0x1aa/0x260 kernel/sched/core.c:4495
 __freeze_task kernel/freezer.c:150 [inline]
 freeze_task+0x216/0x390 kernel/freezer.c:169
 try_to_freeze_tasks+0x190/0x620 kernel/power/process.c:54
 freeze_processes+0xce/0x1e0 kernel/power/process.c:137
 suspend_freeze_processes kernel/power/power.h:281 [inline]
 suspend_prepare kernel/power/suspend.c:387 [inline]
 enter_state kernel/power/suspend.c:609 [inline]
 pm_suspend+0x2f1/0x760 kernel/power/suspend.c:644
 state_store+0x206/0x290 kernel/power/main.c:819
 kernfs_fop_write_iter+0x3a5/0x540 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x61e/0xbb0 fs/read_write.c:687
 ksys_write+0x156/0x270 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5179a4e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffe7aa1f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f5179cd5fa0 RCX: 00007f5179a4e019
RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003
RBP: 00007f5179ae500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5179cd5fac R14: 00007f5179cd5fa0 R15: 00007f5179cd5fa0
 </TASK>

final repro crashed as (corrupted=false):
Freezing user space processes
------------[ cut here ]------------
debug_locks && p->lockdep_depth
WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340 kernel/freezer.c:139, CPU#1: syz.3.20/6013
Modules linked in:
CPU: 1 UID: 0 PID: 6013 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__set_task_frozen+0x260/0x340 kernel/freezer.c:139
Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff
RSP: 0018:ffffc9000420f9f0 EFLAGS: 00010093
RAX: ffffffff81b0b75f RBX: ffff88805cd8dd00 RCX: ffff8880348fdd00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88805cd8dd18
R13: 1ffff1100b9b1ba3 R14: 0000000000000000 R15: ffff88805cd8e900
FS:  000055557f27c500(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5669260218 CR3: 0000000035cd8000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 task_call_func+0x1aa/0x260 kernel/sched/core.c:4495
 __freeze_task kernel/freezer.c:150 [inline]
 freeze_task+0x216/0x390 kernel/freezer.c:169
 try_to_freeze_tasks+0x190/0x620 kernel/power/process.c:54
 freeze_processes+0xce/0x1e0 kernel/power/process.c:137
 suspend_freeze_processes kernel/power/power.h:281 [inline]
 suspend_prepare kernel/power/suspend.c:387 [inline]
 enter_state kernel/power/suspend.c:609 [inline]
 pm_suspend+0x2f1/0x760 kernel/power/suspend.c:644
 state_store+0x206/0x290 kernel/power/main.c:819
 kernfs_fop_write_iter+0x3a5/0x540 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x61e/0xbb0 fs/read_write.c:687
 ksys_write+0x156/0x270 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5179a4e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffe7aa1f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f5179cd5fa0 RCX: 00007f5179a4e019
RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003
RBP: 00007f5179ae500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5179cd5fac R14: 00007f5179cd5fa0 R15: 00007f5179cd5fa0
 </TASK>