Extracting prog: 4m29.120441368s
Minimizing prog: 33m43.734270381s
Simplifying prog options: 0s
Extracting C: 42.626109288s
Simplifying C: 5m56.8736605s


extracting reproducer from 25 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-write-nanosleep-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
single: failed to extract reproducer
bisect: bisecting 25 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 21, 18, 29, 30, 30, 5, 4, 5, 30, 7, 1, 28, 30, 5, 29, 20, 30, 34, 4, 24, 30, 9, 17, 30]
detailed listing:
executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef", 0x11}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x10001)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$can_j1939(0x1d, 0x2, 0x7)
executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x800, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0x704000, @private0, 0xffffffff}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x84)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x3ff, 0x60, 0x2, 0x20000008}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0xad8, 0x400000e, 0x200000, 0x3, 0x5, 0x9})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001500), r2)
chdir(&(0x7f0000000340)='./file0\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250100000008000200020000000800010000000000"], 0x24}}, 0x4000004)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x28}, 0x18)
sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0)
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
inotify_init1(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone3(&(0x7f00000006c0)={0x1220a00, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10)
io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17)
close(r4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0)
executing program 0:
r0 = userfaultfd(0x80801)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000200)=0x1) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
socket$xdp(0x2c, 0x3, 0x0) (async)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) (async)
r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r3, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
read(r0, &(0x7f00000000c0)=""/175, 0x20) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async)
socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
socket$unix(0x1, 0x5, 0x0) (rerun: 32)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x6, 0x9, 0xfffffffe, 0x8, 0x2]}, &(0x7f00000002c0)=0x54) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={r6, &(0x7f0000000600)="73e017fbde910baf4ce0bc5ac5d3709ecab2820cc8bb235a803d7243fa05ba4de26dc64d1bb4d0b91cd4094636ffa55c511ba351ec3b06f9d8f9229b75bf5b85c64e226b77a8500c8967ed14919c743bebb9c75111feb2ad04283663bfd58442206e16846737c6ab1e971b18f2c555217ca3c557b619cc05d3f9f8e12ee24eef283fe16d96f72bc6987fc0665ab883fc195d103c0ae7b39192de45f534f55b1b41e30e3e88c3294af2c32f2e308303d20a9c", &(0x7f00000007c0)=""/209}, 0x20) (async)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) (async)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async, rerun: 32)
sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xb, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f23bf7f9255807a000000bd6e911b51818462b400", 0x28}], 0x1}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
ioctl(r1, 0x1, &(0x7f0000000240))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async)
ioctl(r1, 0x1, &(0x7f0000000240)) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
close(r0) (async)
executing program 0:
r0 = socket(0x11, 0x3, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000019000000b70300000000fdff840000000c000000b70000eeffffffff9400000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00'})
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7})
io_uring_enter(r2, 0x64e, 0xec20, 0x34, &(0x7f0000000140)={[0x400]}, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x297, 0x16, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
readv(r3, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x2, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdbdf25040000040c00170008"], 0x24}}, 0x0)
write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
close(r6)
execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0)
write(r7, &(0x7f0000000180)="01010101", 0x4)
close(r7)
execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r8)
executing program 3:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x502, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x3e, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./file0\x00', 0x10)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x6a15f8c57f1613d8, &(0x7f0000000380))
executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x8001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000100)='- - -', 0x5)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000ebf0f06f3166c43800", @ANYRES16=r2, @ANYBLOB="210325bd7000fedbdf256700000008000100420000005300c50004d8972ccc75fd862c539ddafce6a5b768e975b632cca5e22618737508e508e4584be627b3afacdef09f34600ede162eb6e63e043e140d45589bd8869f0a610721f9d36567e297d42e85f9ff44f7e2000800c30074130000"], 0x78}, 0x1, 0x0, 0x0, 0x8eb27d6e6c80dd5a}, 0x8010)
lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000007c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./dev\x00', 0x1ff)
lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./mnt\x00', &(0x7f0000000480), &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="08a587ecb4d8bf1aff8ddf5ad371d8961b9361543ae074b1ff2080406aac269a16bab88d443142db18c95ff14bd1a8feefa42a4ddd798fc7b3eb0fb9a41fab3393fadbb99f1299aaf6dda1413ba24c42818770912bb386ffad0500c5a8fe6a4b3ef01cbaa884a916f177712980a0a985cd5564ef9b1835a984b6f3354bb50f80b5b54fb850061ea2b04311d3a470df4f6f520d3592fa883365785ec31dd0f91d9059aedf", @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x36, 0x1)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000700)=@sg0, &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe})
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = eventfd(0x2)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x4, r8})
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1})
sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x59}}, {{&(0x7f0000000540)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)="876e546107757615c613b8d6e4513e7a5ff0d595e4078f1f0020403fc4907c7e"}], 0x1}}], 0x2, 0x4008000)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x4, 0x4) (async)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file1\x00'}, 0x6e)
executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00')
executing program 3:
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02010009"], 0x70}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48)
capset(&(0x7f0000000500)={0x20080522}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001140)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x40, 0x2dcd, 0xfffffffd, 0x10000, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc7, 0x5d2, 0x8001, 0xfffffff4, 0x79, 0x2, 0x5, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x42, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0xfffffd, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x4], [0x9, 0x0, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x1, 0x7, 0xad, 0x0, 0x809, 0x40, 0xa7, 0x1000, 0x200000, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x0, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf5, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x0, 0xfffffffa, 0x192, 0x1000, 0xfffffffe, 0x82], [0x2, 0xfffffffa, 0x9, 0xc, 0x80000002, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x5, 0x6, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x401, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x6, 0x200000d, 0x3, 0x3, 0x10007, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x0, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x40000005, 0xfffffffe], [0xa772, 0x6, 0x200005, 0x12f8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x0, 0x4, 0xe, 0x5396, 0x7, 0xa, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x4, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0x1, 0x9, 0x6, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xada1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x8a000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x202081, 0x62)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200, 0x1})
io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r1, 0xc138fd09, &(0x7f0000000000))
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000340)={0x8, [0x9, 0xa8], [{0x5, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x0, 0x1}, {0x2, 0xebd, 0x1, 0x0, 0x1, 0x1}, {0x2, 0xe9, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x1ff, 0x6, 0x1, 0x1, 0x1}, {0x3ff, 0x14a1, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x0, 0x1, 0x1}, {0x5, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x5ee7, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x7fff, 0x0, 0x0, 0x1}], 0x2b1})
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
close(r8)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}, {@nfs_export_on}]})
close(r8)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x8, 0x9, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ec)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8900, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
close(0x3)
r8 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7d)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x1)
timer_delete(r2)
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
sendfile(r1, r0, 0x0, 0x1002000ff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
executing program 1:
r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='\xdb\xday\xf1U\xa3~+1\x00', 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c4a4386417deebb57b4f9549a9f1e609f0b29179aeb087b9bd188891bed214f727a8491c9f00fb22d2ef92c807bd7fc012f222dcafaa587462cc01e2d127100e955023100a969ccafaffe6ef68ffa76577a2c68704f8a028d819b7a65491fe116738db927c93e2bc359e2797232d99bad4f84c305bbb", 0x77}, {&(0x7f00000000c0)="9bca1cf01693", 0x6}, {&(0x7f0000000100)="449ebd18d9c1a055c97f71d83dff66ea09a263c974a5c1b32e12cb4c979a0e3b2a6c1cdb8e6c32c5f2a4a263dcbf", 0x2e}, {&(0x7f0000000280)="4c699d8a8d2d2292467e2495859fc8a8c3c0315f5c6014c63a540fb2bb996cede24f09afa77f99debcb67c06b0cca5364e6ed371356ddfd3b124aa05a9de39097aed6a14f8434e25ba433e02bbb06f10e7578d56f9c896dcddc350c3b01c80a4198a36dd8e30f0421658ea1b8470e216d0f27afea0e180acb09613afa591dd6991b5c9af0c7e6d0649278722a51f3d3c0bbe9613a3a366a2339d9afff731bb366dc39689422bd8fb522b1fb61e27", 0xae}, {&(0x7f0000000340)="9435f8e66a027b76d35793a0f8f10348f10989ee32a19a255afbe4503c5856a7d67d241e7284a85b8952ea62a0047542668ab0d435d6016f3976857721bd291349bd8ab3337a5ef954c8a9c82b5df8f098e2e1c93a38da1df9833fa9c482bb8c28935d989b8b80194a62ed3468a39bbeed30691249efd77c172a", 0x7a}], 0x5, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @local}}}], 0x38}, 0x0)
executing program 1:
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r3)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES32=r2])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {}, [], {0x4, 0x3}, [{0x8, 0x4}], {0x10, 0x1}, {0x20, 0x3}}, 0x2c, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) (async)
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') (async)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r5, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async)
sendto$packet(r6, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r5, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240000, 0x183)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"03eb4a7d5df55758eba469dfc0cdac32e464b1875162e983a3cb50bfae88986c7afdd89f6087348f967938935d411747bc90305e0b841f1ac29b367d9e18dbad48f908754f39bdf477c5ae90b59bac07d9ac86d6fe8ec1f0644e6f64721da20ed51a77fb7b80dda7626617d09d1ffcb42c7eae6726c78de5ea12e8978247fabac1dd4fda917687b09f986fbff4c7ebec40874b910b5e44f91d6169fa7855dcbc4da93f803de85421d5a066ac5862d12d74ba182a80cc46226e8b74d9287ef4c57bb77c2913ba595d6fcb93bdb7ddb85138140035daf623186a9e7fb31985a0bf9adbbe5ab8b6c9ff579952922a37fc0a8278268da63d439124f7fcb12630575bdb49b4f1442387e6603c1315f8a6fe8536f91a3f36883c7ed6db8d0725e285a16e137f55cffd06507aa7bbb8456513c426ead14248b2c17eea0455cb5ed30ee3104b15168b21051a47461374c15302e5801aedc76b3d713924c6cf36dfb4872190291016071cc32a993e35e97134b5435861194d0f19343f482bfb1ada63204d3a8124ec5750229e35517d4bd8f6baba0c149af82b56ce87d4b77c3ab6578150557f16a111d6f261980079c5ef42101ea5c0cdc152a72f2400c70e09ad9716606ad7028d59f0cefe3a680c1c497c7d538db972d6225ecb3bab36a3c87dc0758815b00e58e137686b0914f01806e510fe11397afd3f105bdae9aef4251925586592e878723d3b699cde2a416e1d196ac8381d9ca4967dbc9bd861e3186dc6c540f498470731300f0db340b27e363e2f1903b32d15a14508227299373cee2c8e57f50b7f529367e98618a15d1de44d76e24080974b3438f418e0e6b8bec6c35a05d1cb984abcc2965cdd8ea590038ce66b8541b16179f19f66f6eafee47109a02f4130017ad543a9cbb880bf595cf2aadcde6bdf3071766ae5396bcf1c64b3a403b4148ae931e84b454c834831d6635e5afcdc561430d3c756b00765ece39150e6381cbb49422f4f928b1897ac28aa4c42de183f2854e6d6b91022008e6444373f31dd93034da90e6bd31bf5978f69adb61060411ab7253085cd730e696ee2a25da850bab7e59432307b505a4c87eb52cd1faa12f93e845ed82853046aec11dee57fb447af5eefda2c666c1e9af52518fd54f5cd21fd554979ab33f3cc04d6fecaf4c20ee5cc6a4460bcc52b6274ea3610cf1c982590d7f90d7d1452844e3ca8512bf471dc6ebb1e5554f4fcb065c54891ffeb0bced3f9406d376b96ca73892d547e0596805f80411a0eb2a3434984cec61a1273492c96c293cf0e4c1d2d6ad6bb28f3826a517690b22b4ce0916f6699241da1dbf527a222700b1cb928e55e84ee830df35d31f3fe6095e5f1d62198d4a847526aca62766f97bd8732721049f786c30305967977850b0b8e6ed9841efe4354cbd5be5a1b30e2234f55acee11b90335270253f0a987c9864738fdab7f01471d75110c5f15b933f88a5908e49e4bbca421376bea0d83984134704de66a646c9ef28b690e2a2a856209349b5b6bae2dad634eae5965c1538d9c4bf9b214d50f036ec04ef627452e0eb1ea4587cc4fc8f9488fd660f974d738be826f9db804e06ec89907592b56f7b6380c6a772a053d2a47f33dffe206f4adeae9cc09a2a23108ac1a37c667a3b4b346ef916fd8dcc4d2996506b1151cda342d2c316ba34c163bc03eb6a2468e7198e40ba755ca6b6bf0b5eb98b7bdff00feb0acbdb4cbca0a2f346e6d4fd059f44b93ca62e0c2c715d948cd3f0e0b4128187ce18f64bb26d5f2a333760ce45cbe77dbaad28c2821b257deb507a7a6607d656b812c0f4d6bb6df8b3b3227b80038d1ec331b8efb653a64d9be543caea7454b8f3682b230e02ad5e34a8c52c0c693bb41c2d4911ea9954932f6d8131c96fea058a1c4040822be8def7d05d48aeb8ec69b05badc55727d60be26a6e22957c17e68fd7230da9a6f730c41cd5abfd29c2b3c286f807b9e8495b678f7f73457bd63d5d2028f8f285933f869f092495cb227a0b7eea3076c97f41692e6a20bc85f79dfa8637ba6e8abe06abff5deab239aef86b17a6d14f4780bad9cad72c19be3659594706c9e5c6b56fb84be91f82b376b947b1f46e220490fc6b5ceed90ea68a7eed613e7ae88e2284c92f9d5d19f1136659a0ef93a764ec9740d85ed9d96880b576d1a38264d3e5333d3dcaaca166c991f93668a933befc3d3e96c252518951ec2c254b463a4ac8ccea320caab4664cc7e0146cba9b7a42dda7ac303d7cbd222291a47f29061fd611ff150f343ffb94ef60490d5be0b57e58f436eaf5c5372d6ff99b139dd9c90f372ca85bb9b5d504bd871e2107c963e90aa772bdadd5713d09b890fd9e5e73d762020862222b9bac698702e6e3ebcd6bc81a7c256549ce94f739a690278177005b464890ee839d61064242f30cb6fe2f46f4020ef52825b5971f64e3371f56340a4b5f6d8c8b8521b71000b9b72dc86b24a3884a198ecd821546085c1e91429f52afe7b3690459eae968046ebc3725b7c8e53440ff2abd43f629606b24651b10f082ab0cc7c0e2f6c17fec3e5a4913df43fcb8b9aa9ca141d46dc4832559e6b243240383d7f1a6428e825a3167c797df5590db22c0cd35fe1ad0e6601f17faa47615187a8609642adccfba7701443b9db162798f653c06525cf2313dd4174ebe321c26a26b094245e091b28ad9e170069b1c6063462e1a9df815b2313f1a66c22db36caeca171125593701b2d827b316f6cf833a3b8205a12675d753690fc4ac53a877b4c42e26385552d76be75f6772e2c5a47b365a9b83f0ed65509ca3ae2ee353d9bdfc1eeae9782e077cad1f68a1ab99cac2a30861c27ee73909bc4cc0f7e1b3acbcdfd4a1478d843038c2e80083f8811a187feefbe7d56fafcedd46f53c53b8431ef328d9a5bf0dc031ba6bf5c5eabb59d72675f74c501886b61410fe83978fe5d83c5e035a99865232b539ead31da002ec928e7c153fffc0c519f5ea2ca8853e383cc1e09c47cbc07a07740491e55e73f243ee8a19a1be634cebe5396edaff2d1620dbf5a84b836aea7183037bfcd8ee78f3f45b2e7215dcf8b514ba4cf0dd290b27ac6ad27e1c827cdca95d4479c9f39a1b773933c6fdb62ac8f80dc5060bdec77a2716e5117f7333442e8e2da09a837d8a0b5b9621f0666545b05e9e9f8b115e210b6f591b0f0e7d1a009cb8d6661187836d5bf4a2192b95cb10e6cab3a3fbecee4ea4cb5981ce1ce579a889125dd912069e799881342467ca49e86bda4111f89c1d5ff22a1862ac85cb763c3055b7384728ee60c513f1075100a000113a28e662bba7be5c50d23dd3ec8c13272fd9ff5709d028a091d270c3f7c93d82f5537be0ec79658d445e8d0c4fada301dcc63d62fa05d6c5a836e4ef2294f514906b3bb336d54b998decbd860fc47d6b83a8c7b2d21dca0610169034583556a0006cb67aaa36e9b0cc5744b05cf40fedcbfff9d85daa85b3547c9194d75dd369923479937fa215f38174c76ef495cf377f8b4403808973d742ad474a82ecc039c73cfe76cc514c27d47b4056c5c6e9bafffe677c3b99576edd304d8780d2ba7c3304db9ea492a53ba3dbf3cd8e27dd8a46ee276ee3ffdb3120e5372cba160c318a12ad403cd6ceeb58901bb731bccb217ebc4853379140ef9f690f5023fa59901a03b3573212669edc809e16b9b24b99dc0cdbfec48e16a5955a8e7a94d46dc6d3eca9d408416dbcd0daa558d48bc1bead0dd35aecd44ed52d032bd4017bf15b44fbc9663cafc4e495e9e150d4e87fb07e7781b1ba832564104400de74835c0d415bd525c62ca7506842cbca1f3b52f6b2ed0f44e6bf76d97191613aaa799c952c043cbbc8f9e25183de841599693321dd8488582d9953c466ce50aca86360be5495bc100928d507422d2eda5e0ed999284030e2d1fac36204cd20550112b7b6e40b1613e71e1763e14a1ce6e4c54c846fdd2052d7d86992e1de94fbdb533dd9690e585e85d9015aa4542955aad7c696c5079ca89bc2f8cf51cde5cc05d05c5642dced53b280bc5ffe1c831fececc0bfa1919710a326b47fba725bbf0d8465ff85b8eb2aa38fd7a863b23008232df6cbaff5e3484da0d291e138a4ef31405602d095a9e0aadf0e6737c998f74a3dbc57128d42e2449d74d8e59d3ae1f0d509b9e964da3d5978df76364e17ed5a87ba8bd740b2def5fecd4932e916c3935cbe585a2ecdfbbe4c3cbb380eadb0e84d8b795b596726c1afbf9a8868cda6aa9e8dd39d0947cf3d7922d1a12454606115cee4572c488e2dd33ee51dd261770fa4aeda05eebadb29bbbb9fb9498d8d5910f083a6dde373be7cd17be082dee444b83edec8d970a004eddbeb17a94d99819a8abd64ad01d8e7f9b053f7fbaebc426b118dc3b37e6909d7eadd3a9224ab82ef9b4c54aa5928ed19ff89903b9403e29758f3c48d303bb34862685bbe4fd9d6eb1eacddbd27df1a7eb1089d9adeea2e2f5f70ee4d36101f1c9c2b31fcefe6ac0c61d4cf28f8e171fbceadc04729bce193cdc66ac5d474f4ab3c416973b3f4944c7ed5b6b5539ebb701e74c0c4c8acc1c85e8e688114cb2063abae23d831fb5f651b5b562d79aac00d1169ce63d2af3ce9a8d07514bf93d68684557469b9a29f2a5efc4b1ebaf24252dd3325b202c8e3cd2310403c521ebad523a737e9ac80a262ab51c71523919aa0952d312a842806f5a61c97e399ac7d90ce554a64a8784d87ea0c634131ae3958b242b97855e60ce258ef4320cd0b01bcf0f28116c60cbb1c0439ce04a65063dd49ef9a6af725ce4a967f577ace4046f48de0c3ad2278d93f2bc8d0e4d008142ceb4436f0aa1b3d14b477bb361bbdb82bc9656cb6f089b1e4b614788af5d1d317dbedf917b8e5b6f852b4b1ac7cab622e4bbcba535706a9b2537f5801e687abb92ae6b3b522b1790a3bf49ea1dff71e9318823700ccebdab883fe744bc9626c02f58cd6d8c7733bb567ebf1000e2489de645923576b1cece930cb6db80704314b6f69e2bf5bba8798d43861155c047b21d913813d9f5d509e48fa61030b480d782e66804ebd3fdd60baf5809500e1edd75bdd2beedb7c75827f0175ff0a6b4c2d3b46ce180b4306cb5b7705ab106f176c3a63670dd8b6fbcbd6a00b9bbefade40921ec4e29dd5b169f61a1878dfd00c1f6cf33927e85046bede4d4d3aee7cbd18606e63a2816731081de4a25184d4f5e007f2fd748a2bb5b7c22924cd0ef3b7687fc1610b6332e4d36289d7f6f40fb9bde506801dc34bd54244b76f0ad559b551b7dbe84e5749ae02b617fc883da9c00e117694f39f099c87b709b1c680fa75df9bb62d15eaeb0b2a39624bba5be87ef82e3779c6bf738fad8a3704e9e18010487c34a04d145cb0aaafab91323cfbaf6d8cc8ed96a3eff6f67e9aedb4b4178489a699d849ea6115af2ca17b75ce3bbba916424ec23a0ca4f8cc01230a3fd0ef0f311a40fe8e08562e62e4262592e0f1d072afb087ba9a6d55c7a695c0ad52c1f49f501569c6cc842eec26dc5daa69c001e7ca08617330385ccbcd2f4c1a6a70a14cae2dcd5fef45fcdb6620d6e75c1d8b7dbac30c1adeef2b048135d3ffce2da832b17b436a871e0e971559e1c810b0b85b00e827182e5ef91d308e7e4757dcf3ad8f61774381967bb1ac222d4b1c5e43327b790ac72088c9cb870ccc9051c6ab5248673f1ecc2e50ff623fdd8439164f44f86d1d9facdfc14eb1ed418c3ef05ae6275f32ac766bd2523be3719553be6c0526880753be0f041", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2)
syz_open_dev$media(&(0x7f00000000c0), 0xff, 0x480)
syz_emit_ethernet(0x8c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7e, 0x66, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x3ff, 0x6a, 0x0, @opaque="f3129fac8b97d0a12e2cdbb21fb0b7c55aae1aa50bca0c4bc58fb8d7056fba293af414b987f0b953c42bbda745867474e1c76139d7fe636cc6bcab6a1441e6274d074d994c59fb33deec9dca85ee2d7d62694b0020b793c78b4b12e7e2834a38d0be"}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240000, 0x183) (async)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"03eb4a7d5df55758eba469dfc0cdac32e464b1875162e983a3cb50bfae88986c7afdd89f6087348f967938935d411747bc90305e0b841f1ac29b367d9e18dbad48f908754f39bdf477c5ae90b59bac07d9ac86d6fe8ec1f0644e6f64721da20ed51a77fb7b80dda7626617d09d1ffcb42c7eae6726c78de5ea12e8978247fabac1dd4fda917687b09f986fbff4c7ebec40874b910b5e44f91d6169fa7855dcbc4da93f803de85421d5a066ac5862d12d74ba182a80cc46226e8b74d9287ef4c57bb77c2913ba595d6fcb93bdb7ddb85138140035daf623186a9e7fb31985a0bf9adbbe5ab8b6c9ff579952922a37fc0a8278268da63d439124f7fcb12630575bdb49b4f1442387e6603c1315f8a6fe8536f91a3f36883c7ed6db8d0725e285a16e137f55cffd06507aa7bbb8456513c426ead14248b2c17eea0455cb5ed30ee3104b15168b21051a47461374c15302e5801aedc76b3d713924c6cf36dfb4872190291016071cc32a993e35e97134b5435861194d0f19343f482bfb1ada63204d3a8124ec5750229e35517d4bd8f6baba0c149af82b56ce87d4b77c3ab6578150557f16a111d6f261980079c5ef42101ea5c0cdc152a72f2400c70e09ad9716606ad7028d59f0cefe3a680c1c497c7d538db972d6225ecb3bab36a3c87dc0758815b00e58e137686b0914f01806e510fe11397afd3f105bdae9aef4251925586592e878723d3b699cde2a416e1d196ac8381d9ca4967dbc9bd861e3186dc6c540f498470731300f0db340b27e363e2f1903b32d15a14508227299373cee2c8e57f50b7f529367e98618a15d1de44d76e24080974b3438f418e0e6b8bec6c35a05d1cb984abcc2965cdd8ea590038ce66b8541b16179f19f66f6eafee47109a02f4130017ad543a9cbb880bf595cf2aadcde6bdf3071766ae5396bcf1c64b3a403b4148ae931e84b454c834831d6635e5afcdc561430d3c756b00765ece39150e6381cbb49422f4f928b1897ac28aa4c42de183f2854e6d6b91022008e6444373f31dd93034da90e6bd31bf5978f69adb61060411ab7253085cd730e696ee2a25da850bab7e59432307b505a4c87eb52cd1faa12f93e845ed82853046aec11dee57fb447af5eefda2c666c1e9af52518fd54f5cd21fd554979ab33f3cc04d6fecaf4c20ee5cc6a4460bcc52b6274ea3610cf1c982590d7f90d7d1452844e3ca8512bf471dc6ebb1e5554f4fcb065c54891ffeb0bced3f9406d376b96ca73892d547e0596805f80411a0eb2a3434984cec61a1273492c96c293cf0e4c1d2d6ad6bb28f3826a517690b22b4ce0916f6699241da1dbf527a222700b1cb928e55e84ee830df35d31f3fe6095e5f1d62198d4a847526aca62766f97bd8732721049f786c30305967977850b0b8e6ed9841efe4354cbd5be5a1b30e2234f55acee11b90335270253f0a987c9864738fdab7f01471d75110c5f15b933f88a5908e49e4bbca421376bea0d83984134704de66a646c9ef28b690e2a2a856209349b5b6bae2dad634eae5965c1538d9c4bf9b214d50f036ec04ef627452e0eb1ea4587cc4fc8f9488fd660f974d738be826f9db804e06ec89907592b56f7b6380c6a772a053d2a47f33dffe206f4adeae9cc09a2a23108ac1a37c667a3b4b346ef916fd8dcc4d2996506b1151cda342d2c316ba34c163bc03eb6a2468e7198e40ba755ca6b6bf0b5eb98b7bdff00feb0acbdb4cbca0a2f346e6d4fd059f44b93ca62e0c2c715d948cd3f0e0b4128187ce18f64bb26d5f2a333760ce45cbe77dbaad28c2821b257deb507a7a6607d656b812c0f4d6bb6df8b3b3227b80038d1ec331b8efb653a64d9be543caea7454b8f3682b230e02ad5e34a8c52c0c693bb41c2d4911ea9954932f6d8131c96fea058a1c4040822be8def7d05d48aeb8ec69b05badc55727d60be26a6e22957c17e68fd7230da9a6f730c41cd5abfd29c2b3c286f807b9e8495b678f7f73457bd63d5d2028f8f285933f869f092495cb227a0b7eea3076c97f41692e6a20bc85f79dfa8637ba6e8abe06abff5deab239aef86b17a6d14f4780bad9cad72c19be3659594706c9e5c6b56fb84be91f82b376b947b1f46e220490fc6b5ceed90ea68a7eed613e7ae88e2284c92f9d5d19f1136659a0ef93a764ec9740d85ed9d96880b576d1a38264d3e5333d3dcaaca166c991f93668a933befc3d3e96c252518951ec2c254b463a4ac8ccea320caab4664cc7e0146cba9b7a42dda7ac303d7cbd222291a47f29061fd611ff150f343ffb94ef60490d5be0b57e58f436eaf5c5372d6ff99b139dd9c90f372ca85bb9b5d504bd871e2107c963e90aa772bdadd5713d09b890fd9e5e73d762020862222b9bac698702e6e3ebcd6bc81a7c256549ce94f739a690278177005b464890ee839d61064242f30cb6fe2f46f4020ef52825b5971f64e3371f56340a4b5f6d8c8b8521b71000b9b72dc86b24a3884a198ecd821546085c1e91429f52afe7b3690459eae968046ebc3725b7c8e53440ff2abd43f629606b24651b10f082ab0cc7c0e2f6c17fec3e5a4913df43fcb8b9aa9ca141d46dc4832559e6b243240383d7f1a6428e825a3167c797df5590db22c0cd35fe1ad0e6601f17faa47615187a8609642adccfba7701443b9db162798f653c06525cf2313dd4174ebe321c26a26b094245e091b28ad9e170069b1c6063462e1a9df815b2313f1a66c22db36caeca171125593701b2d827b316f6cf833a3b8205a12675d753690fc4ac53a877b4c42e26385552d76be75f6772e2c5a47b365a9b83f0ed65509ca3ae2ee353d9bdfc1eeae9782e077cad1f68a1ab99cac2a30861c27ee73909bc4cc0f7e1b3acbcdfd4a1478d843038c2e80083f8811a187feefbe7d56fafcedd46f53c53b8431ef328d9a5bf0dc031ba6bf5c5eabb59d72675f74c501886b61410fe83978fe5d83c5e035a99865232b539ead31da002ec928e7c153fffc0c519f5ea2ca8853e383cc1e09c47cbc07a07740491e55e73f243ee8a19a1be634cebe5396edaff2d1620dbf5a84b836aea7183037bfcd8ee78f3f45b2e7215dcf8b514ba4cf0dd290b27ac6ad27e1c827cdca95d4479c9f39a1b773933c6fdb62ac8f80dc5060bdec77a2716e5117f7333442e8e2da09a837d8a0b5b9621f0666545b05e9e9f8b115e210b6f591b0f0e7d1a009cb8d6661187836d5bf4a2192b95cb10e6cab3a3fbecee4ea4cb5981ce1ce579a889125dd912069e799881342467ca49e86bda4111f89c1d5ff22a1862ac85cb763c3055b7384728ee60c513f1075100a000113a28e662bba7be5c50d23dd3ec8c13272fd9ff5709d028a091d270c3f7c93d82f5537be0ec79658d445e8d0c4fada301dcc63d62fa05d6c5a836e4ef2294f514906b3bb336d54b998decbd860fc47d6b83a8c7b2d21dca0610169034583556a0006cb67aaa36e9b0cc5744b05cf40fedcbfff9d85daa85b3547c9194d75dd369923479937fa215f38174c76ef495cf377f8b4403808973d742ad474a82ecc039c73cfe76cc514c27d47b4056c5c6e9bafffe677c3b99576edd304d8780d2ba7c3304db9ea492a53ba3dbf3cd8e27dd8a46ee276ee3ffdb3120e5372cba160c318a12ad403cd6ceeb58901bb731bccb217ebc4853379140ef9f690f5023fa59901a03b3573212669edc809e16b9b24b99dc0cdbfec48e16a5955a8e7a94d46dc6d3eca9d408416dbcd0daa558d48bc1bead0dd35aecd44ed52d032bd4017bf15b44fbc9663cafc4e495e9e150d4e87fb07e7781b1ba832564104400de74835c0d415bd525c62ca7506842cbca1f3b52f6b2ed0f44e6bf76d97191613aaa799c952c043cbbc8f9e25183de841599693321dd8488582d9953c466ce50aca86360be5495bc100928d507422d2eda5e0ed999284030e2d1fac36204cd20550112b7b6e40b1613e71e1763e14a1ce6e4c54c846fdd2052d7d86992e1de94fbdb533dd9690e585e85d9015aa4542955aad7c696c5079ca89bc2f8cf51cde5cc05d05c5642dced53b280bc5ffe1c831fececc0bfa1919710a326b47fba725bbf0d8465ff85b8eb2aa38fd7a863b23008232df6cbaff5e3484da0d291e138a4ef31405602d095a9e0aadf0e6737c998f74a3dbc57128d42e2449d74d8e59d3ae1f0d509b9e964da3d5978df76364e17ed5a87ba8bd740b2def5fecd4932e916c3935cbe585a2ecdfbbe4c3cbb380eadb0e84d8b795b596726c1afbf9a8868cda6aa9e8dd39d0947cf3d7922d1a12454606115cee4572c488e2dd33ee51dd261770fa4aeda05eebadb29bbbb9fb9498d8d5910f083a6dde373be7cd17be082dee444b83edec8d970a004eddbeb17a94d99819a8abd64ad01d8e7f9b053f7fbaebc426b118dc3b37e6909d7eadd3a9224ab82ef9b4c54aa5928ed19ff89903b9403e29758f3c48d303bb34862685bbe4fd9d6eb1eacddbd27df1a7eb1089d9adeea2e2f5f70ee4d36101f1c9c2b31fcefe6ac0c61d4cf28f8e171fbceadc04729bce193cdc66ac5d474f4ab3c416973b3f4944c7ed5b6b5539ebb701e74c0c4c8acc1c85e8e688114cb2063abae23d831fb5f651b5b562d79aac00d1169ce63d2af3ce9a8d07514bf93d68684557469b9a29f2a5efc4b1ebaf24252dd3325b202c8e3cd2310403c521ebad523a737e9ac80a262ab51c71523919aa0952d312a842806f5a61c97e399ac7d90ce554a64a8784d87ea0c634131ae3958b242b97855e60ce258ef4320cd0b01bcf0f28116c60cbb1c0439ce04a65063dd49ef9a6af725ce4a967f577ace4046f48de0c3ad2278d93f2bc8d0e4d008142ceb4436f0aa1b3d14b477bb361bbdb82bc9656cb6f089b1e4b614788af5d1d317dbedf917b8e5b6f852b4b1ac7cab622e4bbcba535706a9b2537f5801e687abb92ae6b3b522b1790a3bf49ea1dff71e9318823700ccebdab883fe744bc9626c02f58cd6d8c7733bb567ebf1000e2489de645923576b1cece930cb6db80704314b6f69e2bf5bba8798d43861155c047b21d913813d9f5d509e48fa61030b480d782e66804ebd3fdd60baf5809500e1edd75bdd2beedb7c75827f0175ff0a6b4c2d3b46ce180b4306cb5b7705ab106f176c3a63670dd8b6fbcbd6a00b9bbefade40921ec4e29dd5b169f61a1878dfd00c1f6cf33927e85046bede4d4d3aee7cbd18606e63a2816731081de4a25184d4f5e007f2fd748a2bb5b7c22924cd0ef3b7687fc1610b6332e4d36289d7f6f40fb9bde506801dc34bd54244b76f0ad559b551b7dbe84e5749ae02b617fc883da9c00e117694f39f099c87b709b1c680fa75df9bb62d15eaeb0b2a39624bba5be87ef82e3779c6bf738fad8a3704e9e18010487c34a04d145cb0aaafab91323cfbaf6d8cc8ed96a3eff6f67e9aedb4b4178489a699d849ea6115af2ca17b75ce3bbba916424ec23a0ca4f8cc01230a3fd0ef0f311a40fe8e08562e62e4262592e0f1d072afb087ba9a6d55c7a695c0ad52c1f49f501569c6cc842eec26dc5daa69c001e7ca08617330385ccbcd2f4c1a6a70a14cae2dcd5fef45fcdb6620d6e75c1d8b7dbac30c1adeef2b048135d3ffce2da832b17b436a871e0e971559e1c810b0b85b00e827182e5ef91d308e7e4757dcf3ad8f61774381967bb1ac222d4b1c5e43327b790ac72088c9cb870ccc9051c6ab5248673f1ecc2e50ff623fdd8439164f44f86d1d9facdfc14eb1ed418c3ef05ae6275f32ac766bd2523be3719553be6c0526880753be0f041", 0x1000}}, 0x1006) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) (async)
syz_open_dev$media(&(0x7f00000000c0), 0xff, 0x480) (async)
syz_emit_ethernet(0x8c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7e, 0x66, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x3ff, 0x6a, 0x0, @opaque="f3129fac8b97d0a12e2cdbb21fb0b7c55aae1aa50bca0c4bc58fb8d7056fba293af414b987f0b953c42bbda745867474e1c76139d7fe636cc6bcab6a1441e6274d074d994c59fb33deec9dca85ee2d7d62694b0020b793c78b4b12e7e2834a38d0be"}}}}}, 0x0) (async)
executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfe, 0x7fff0026}]})
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6})
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x220, 0x3, 0x0, 0x2000}, 0x30, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x4, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200000000000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x43a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3]})
landlock_restrict_self(r5, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00')
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000200)='casefold,strict_encoding\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir\x00', 0x1ff)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir\x00', 0x10000, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000500)=0x40000000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x83, &(0x7f0000001000), 0x8)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000001c0)=0x23, 0xfffffffffffffe4c)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r9 = socket$inet(0x2, 0x3, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000180)=0xd)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, 0x78b})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc004000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf25040000009c000c8014000b800800090070295716080009000e05ea4e14000b8008000a00d26000000800090080a5e70a04000b8024000b8008000a007315000008000a004b25000008000a0031a3000008000900bf51c40c34000b8008000a00f69e00000800090051c9b01308000a00511e000008000900e0d12e6c08000a00059c0000080009005d90a12814000b8008000a006b7d000008000a00176b00001c000480050003000700000005000300060000000500030006000000"], 0xcc}}, 0x4000081)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf8a, 0x0)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
ioctl$CDROMVOLCTRL(r6, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, 0x78b}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000) (async)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc004000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf25040000009c000c8014000b800800090070295716080009000e05ea4e14000b8008000a00d26000000800090080a5e70a04000b8024000b8008000a007315000008000a004b25000008000a0031a3000008000900bf51c40c34000b8008000a00f69e00000800090051c9b01308000a00511e000008000900e0d12e6c08000a00059c0000080009005d90a12814000b8008000a006b7d000008000a00176b00001c000480050003000700000005000300060000000500030006000000"], 0xcc}}, 0x4000081) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) (async)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) (async)
chdir(&(0x7f0000000240)='./file0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) (async)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf8a, 0x0) (async)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) (async)
ioctl$CDROMVOLCTRL(r6, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0) (async)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="653a6d7967726f75702f6d796576656e742073636865642e73636865645f737769746368da0dc1", 0x27)
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
setns(0xc9, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000040000000e5e7aa9b00000008000300", @ANYRES32=r6, @ANYBLOB="0c005a80"], 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/fs/nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x223c0, 0x0)
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x6000004, 0x0, 0x0, 0x0, 0x4})
chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x20)
write(r8, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r9=>0x0, 0x29, 0x3, 0x4, 0x18a4, 0x0, @mcast1, @mcast2, 0x10, 0x80, 0x4f, 0x7}})
sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x70, 0x15, 0x4, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x32, 0x0, r9}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x12}, @IFA_FLAGS={0x8, 0x8, 0x59}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x7fff, 0x64e, 0x4}}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffa, 0x0, 0x6, 0xa06}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10d000, 0x10)
fchown(r10, 0x0, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001300"/28], 0x50) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b1092947d2dac51bc3bd616d8cb243de2595d28a5dc7767b0b0cf56e6dafa4efb51e08d8f9994bc73ae0c339c85525f51411e81b4c0d71a795784e07829eecb58b07d5aa9b1cc2b561bd29a155356275df68d78d2bc4d75b7386968ad226876531cbf2c54da0c6bbd58e583b697a2fc769e1319c20553a6190db335b81185a97baffe9c9c7d9b30518561766232ece52a2a6ccb3dd774db019906b4c908c56b3604719ecb176fa86bac79238db898cab7c39dceb5b76ee8b27223d35cbee98a9", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x88c4) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001900)="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", 0x1000}], 0x1, &(0x7f0000002940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x38aa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd84}}], 0x50}, 0x4000810) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@getchain={0x3c, 0x66, 0x800, 0x70bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0x10, 0xc}, {0x4, 0xfff3}, {0x0, 0x1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x55b2}, {0x8, 0xb, 0x1000}]}, 0x3c}}, 0x850)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESHEX=0x0], 0x24}, 0x1, 0x8000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0x1, 0x5}, {0xfff8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x40010c0) (async)
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff}) (async)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x418, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x404, 0x1, [@m_vlan={0xd0, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x9a, 0x6, "7d653746f870fb7326568349c5463233abc48abd02ed10225a426434eb586de618246f89eed7f60294aaa9acf8408e2640d3c2c0a9268aedbd2f2a8961761b068610f5e849a9a633a4509fc963407882e975bae7c13a882cf9bfb77ff76aeba825dd46a63c3d5e3e6222d8857ca86aab379cad709ca61c51e50df42e1221c8a64afdc41ef571c4101e54290d9c600071afe4376f2765"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x178, 0x1c, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x2, 0x6, 0x378f8a89, 0x6}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e090274e1a69"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="64326d46d547"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x747c}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="0480de8c25f8"}]}, {0xe4, 0x6, "4a3f0165a916df0aca983f97d0377dca5f2af89f2a9e8463d876c1b3574ff1574ab2e7f737df8add78fb15d7e6e5aaa0cee6cb996a376d186c5b8cd3e7d4516c7950e6207af217567372e464d88e917156b3473f99c596f5490f2dde5fa9bbb3b4d9734b8a88cdcc022331ae9151ab02002791b4d1dd9ab69646d96a42a978613ccc9f67dfea222d20b2e255312b394360f6d8bb4058206ed06cee9aaf47bc3ade5519507570f33dfd23eb6ca97336c298d5b66cc0a313146e7a84d3ec7f39d813bbbd9ce559adadf724c1ef89eccb19bf91df571938fe60abec63217124f582"}, {0xc, 0x7, {0x0, 0xd15f73e737cc668f}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1b8, 0x12, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xe0, 0x6, {0x3, 'mangle\x00', 0x2, 0x1c, "b04acd5e0b52254694bd170e787a0f2ddd1b9b420c211cb3fcb34ba006505da4d73e7d9bab2984afdd70c3598b09d3627d69675848f1e945bed6836f4f01a01f53e23ea297a27514ea44e708a942a37a9a54a833cbe2539a40da2e19304f25296bb2e969c55e1f5ee28d19c9d7bf9bd86876a29f58fa93c6d5c9d97ba38a4820e36257303b2745a4831505a36de931c868a787a9f30b95ce3f7415df29680b5ba79e54c77325af8e655102fb072ccb126de44de2b7f7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x41, 0x6, {0x8, 'security\x00', 0xd8, 0x8, "b7416f8d5120e1eb5420b36352c4b55cc3c594833024de"}}]}, {0x28, 0x6, "c80b93e73e2f03c6a9b5f66496ab0131b8ad54a9e7a036bc953f07bf2e9fc2ebad42ac82"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x418}}, 0x4000080) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="76b9dcf800c00f326635010000001f1664660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5546a660f3829544e66b9800000c00f320f300f01df66b805000000f3a5baf80c66b80e5ca48fbafc0cec0f01310f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, &(0x7f0000000100)={'hsr0\x00', {0x2, 0x0, @loopback}})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000700)={&(0x7f0000000380), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf25090000b0bd00330008003a0007000000050038000000000005002d000800000008003c00"], 0x34}, 0x1, 0x0, 0x0, 0x4004054}, 0x40040d0) (async)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async)
sendto$inet(r10, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000180), 0x3)
executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"})
executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xf, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x91}]}, 0x2c}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffc69}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd)
executing program 1:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-write-nanosleep-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
single: failed to extract reproducer
bisect: bisecting 25 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 21, 18, 29, 30, 30, 5, 4, 5, 30, 7, 1, 28, 30, 5, 29, 20, 30, 34, 4, 24, 30, 9, 17, 30]
detailed listing:
executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef", 0x11}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x10001)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$can_j1939(0x1d, 0x2, 0x7)
executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x800, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0x704000, @private0, 0xffffffff}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x84)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x3ff, 0x60, 0x2, 0x20000008}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0xad8, 0x400000e, 0x200000, 0x3, 0x5, 0x9})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001500), r2)
chdir(&(0x7f0000000340)='./file0\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250100000008000200020000000800010000000000"], 0x24}}, 0x4000004)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x28}, 0x18)
sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0)
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
inotify_init1(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone3(&(0x7f00000006c0)={0x1220a00, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10)
io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17)
close(r4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0)
executing program 0:
r0 = userfaultfd(0x80801)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000200)=0x1) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
socket$xdp(0x2c, 0x3, 0x0) (async)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) (async)
r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r3, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
read(r0, &(0x7f00000000c0)=""/175, 0x20) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async)
socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
socket$unix(0x1, 0x5, 0x0) (rerun: 32)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x6, 0x9, 0xfffffffe, 0x8, 0x2]}, &(0x7f00000002c0)=0x54) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={r6, &(0x7f0000000600)="73e017fbde910baf4ce0bc5ac5d3709ecab2820cc8bb235a803d7243fa05ba4de26dc64d1bb4d0b91cd4094636ffa55c511ba351ec3b06f9d8f9229b75bf5b85c64e226b77a8500c8967ed14919c743bebb9c75111feb2ad04283663bfd58442206e16846737c6ab1e971b18f2c555217ca3c557b619cc05d3f9f8e12ee24eef283fe16d96f72bc6987fc0665ab883fc195d103c0ae7b39192de45f534f55b1b41e30e3e88c3294af2c32f2e308303d20a9c", &(0x7f00000007c0)=""/209}, 0x20) (async)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) (async)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async, rerun: 32)
sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xb, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f23bf7f9255807a000000bd6e911b51818462b400", 0x28}], 0x1}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
ioctl(r1, 0x1, &(0x7f0000000240))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async)
ioctl(r1, 0x1, &(0x7f0000000240)) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
close(r0) (async)
executing program 0:
r0 = socket(0x11, 0x3, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000019000000b70300000000fdff840000000c000000b70000eeffffffff9400000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00'})
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7})
io_uring_enter(r2, 0x64e, 0xec20, 0x34, &(0x7f0000000140)={[0x400]}, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x297, 0x16, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
readv(r3, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x2, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdbdf25040000040c00170008"], 0x24}}, 0x0)
write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
close(r6)
execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0)
write(r7, &(0x7f0000000180)="01010101", 0x4)
close(r7)
execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r8)
executing program 3:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x502, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x3e, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./file0\x00', 0x10)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x6a15f8c57f1613d8, &(0x7f0000000380))
executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x8001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000100)='- - -', 0x5)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000ebf0f06f3166c43800", @ANYRES16=r2, @ANYBLOB="210325bd7000fedbdf256700000008000100420000005300c50004d8972ccc75fd862c539ddafce6a5b768e975b632cca5e22618737508e508e4584be627b3afacdef09f34600ede162eb6e63e043e140d45589bd8869f0a610721f9d36567e297d42e85f9ff44f7e2000800c30074130000"], 0x78}, 0x1, 0x0, 0x0, 0x8eb27d6e6c80dd5a}, 0x8010)
lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000007c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./dev\x00', 0x1ff)
lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./mnt\x00', &(0x7f0000000480), &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="08a587ecb4d8bf1aff8ddf5ad371d8961b9361543ae074b1ff2080406aac269a16bab88d443142db18c95ff14bd1a8feefa42a4ddd798fc7b3eb0fb9a41fab3393fadbb99f1299aaf6dda1413ba24c42818770912bb386ffad0500c5a8fe6a4b3ef01cbaa884a916f177712980a0a985cd5564ef9b1835a984b6f3354bb50f80b5b54fb850061ea2b04311d3a470df4f6f520d3592fa883365785ec31dd0f91d9059aedf", @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x36, 0x1)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000700)=@sg0, &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe})
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = eventfd(0x2)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x4, r8})
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1})
sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x59}}, {{&(0x7f0000000540)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)="876e546107757615c613b8d6e4513e7a5ff0d595e4078f1f0020403fc4907c7e"}], 0x1}}], 0x2, 0x4008000)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x4, 0x4) (async)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file1\x00'}, 0x6e)
executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00')
executing program 3:
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02010009"], 0x70}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48)
capset(&(0x7f0000000500)={0x20080522}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001140)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x40, 0x2dcd, 0xfffffffd, 0x10000, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc7, 0x5d2, 0x8001, 0xfffffff4, 0x79, 0x2, 0x5, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x42, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0xfffffd, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x4], [0x9, 0x0, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x1, 0x7, 0xad, 0x0, 0x809, 0x40, 0xa7, 0x1000, 0x200000, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x0, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf5, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x0, 0xfffffffa, 0x192, 0x1000, 0xfffffffe, 0x82], [0x2, 0xfffffffa, 0x9, 0xc, 0x80000002, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x5, 0x6, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x401, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x6, 0x200000d, 0x3, 0x3, 0x10007, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x0, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x40000005, 0xfffffffe], [0xa772, 0x6, 0x200005, 0x12f8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x0, 0x4, 0xe, 0x5396, 0x7, 0xa, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x4, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0x1, 0x9, 0x6, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xada1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x8a000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x202081, 0x62)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200, 0x1})
io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r1, 0xc138fd09, &(0x7f0000000000))
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000340)={0x8, [0x9, 0xa8], [{0x5, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x0, 0x1}, {0x2, 0xebd, 0x1, 0x0, 0x1, 0x1}, {0x2, 0xe9, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x1ff, 0x6, 0x1, 0x1, 0x1}, {0x3ff, 0x14a1, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x0, 0x1, 0x1}, {0x5, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x5ee7, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x7fff, 0x0, 0x0, 0x1}], 0x2b1})
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
close(r8)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}, {@nfs_export_on}]})
close(r8)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x8, 0x9, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ec)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8900, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
close(0x3)
r8 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7d)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x1)
timer_delete(r2)
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
sendfile(r1, r0, 0x0, 0x1002000ff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
executing program 1:
r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='\xdb\xday\xf1U\xa3~+1\x00', 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c4a4386417deebb57b4f9549a9f1e609f0b29179aeb087b9bd188891bed214f727a8491c9f00fb22d2ef92c807bd7fc012f222dcafaa587462cc01e2d127100e955023100a969ccafaffe6ef68ffa76577a2c68704f8a028d819b7a65491fe116738db927c93e2bc359e2797232d99bad4f84c305bbb", 0x77}, {&(0x7f00000000c0)="9bca1cf01693", 0x6}, {&(0x7f0000000100)="449ebd18d9c1a055c97f71d83dff66ea09a263c974a5c1b32e12cb4c979a0e3b2a6c1cdb8e6c32c5f2a4a263dcbf", 0x2e}, {&(0x7f0000000280)="4c699d8a8d2d2292467e2495859fc8a8c3c0315f5c6014c63a540fb2bb996cede24f09afa77f99debcb67c06b0cca5364e6ed371356ddfd3b124aa05a9de39097aed6a14f8434e25ba433e02bbb06f10e7578d56f9c896dcddc350c3b01c80a4198a36dd8e30f0421658ea1b8470e216d0f27afea0e180acb09613afa591dd6991b5c9af0c7e6d0649278722a51f3d3c0bbe9613a3a366a2339d9afff731bb366dc39689422bd8fb522b1fb61e27", 0xae}, {&(0x7f0000000340)="9435f8e66a027b76d35793a0f8f10348f10989ee32a19a255afbe4503c5856a7d67d241e7284a85b8952ea62a0047542668ab0d435d6016f3976857721bd291349bd8ab3337a5ef954c8a9c82b5df8f098e2e1c93a38da1df9833fa9c482bb8c28935d989b8b80194a62ed3468a39bbeed30691249efd77c172a", 0x7a}], 0x5, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @local}}}], 0x38}, 0x0)
executing program 1:
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r3)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES32=r2])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {}, [], {0x4, 0x3}, [{0x8, 0x4}], {0x10, 0x1}, {0x20, 0x3}}, 0x2c, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) (async)
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') (async)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r5, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async)
sendto$packet(r6, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r5, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240000, 0x183)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2)
syz_open_dev$media(&(0x7f00000000c0), 0xff, 0x480)
syz_emit_ethernet(0x8c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7e, 0x66, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x3ff, 0x6a, 0x0, @opaque="f3129fac8b97d0a12e2cdbb21fb0b7c55aae1aa50bca0c4bc58fb8d7056fba293af414b987f0b953c42bbda745867474e1c76139d7fe636cc6bcab6a1441e6274d074d994c59fb33deec9dca85ee2d7d62694b0020b793c78b4b12e7e2834a38d0be"}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240000, 0x183) (async)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) (async)
syz_open_dev$media(&(0x7f00000000c0), 0xff, 0x480) (async)
syz_emit_ethernet(0x8c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7e, 0x66, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x3ff, 0x6a, 0x0, @opaque="f3129fac8b97d0a12e2cdbb21fb0b7c55aae1aa50bca0c4bc58fb8d7056fba293af414b987f0b953c42bbda745867474e1c76139d7fe636cc6bcab6a1441e6274d074d994c59fb33deec9dca85ee2d7d62694b0020b793c78b4b12e7e2834a38d0be"}}}}}, 0x0) (async)
executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfe, 0x7fff0026}]})
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6})
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x220, 0x3, 0x0, 0x2000}, 0x30, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x4, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200000000000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x43a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3]})
landlock_restrict_self(r5, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00')
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000200)='casefold,strict_encoding\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir\x00', 0x1ff)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir\x00', 0x10000, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000500)=0x40000000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x83, &(0x7f0000001000), 0x8)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000001c0)=0x23, 0xfffffffffffffe4c)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r9 = socket$inet(0x2, 0x3, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000180)=0xd)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, 0x78b})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc004000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf25040000009c000c8014000b800800090070295716080009000e05ea4e14000b8008000a00d26000000800090080a5e70a04000b8024000b8008000a007315000008000a004b25000008000a0031a3000008000900bf51c40c34000b8008000a00f69e00000800090051c9b01308000a00511e000008000900e0d12e6c08000a00059c0000080009005d90a12814000b8008000a006b7d000008000a00176b00001c000480050003000700000005000300060000000500030006000000"], 0xcc}}, 0x4000081)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="d08908650d2277752b4a3739e546738d772937af35eacb91ffb40a9a68517e24fa2c8a3b6aa0b72db5365ee0942eb7f133dc0a395491bb95b339d8e41d21787a8e83c362a07e74198b7a512220bbab4d4388cf2cc9380ef046be806d7e3c7422e43e3b39d94bef57634b702468e60c29029eba5a05a3ad6b744e211435a90dfffe873e1fd4b6e5e93d8abf51f3e70566b3d638e6cf0d61298699dcc0763a9438d05b50604d21eabce341b22b119cef38064f4a93fdd724e25d76f8fe3c0e9419b7db6a3dfaab481e076486349f767b63e9b00e5553e308d0c535734cde604ee4958d84cc5cb07a01ce24db10aa26da756891443d86f89479da5a826460f62144c7866eaadc2a7b7ffb7fd7fd7752d30bccc57075c5a9a484e4eb93c54b1bb07b588adfdccad44691899f3d6970aa668258cc9f16343abc30c862d80bbfac5840e1f505d9dbdd952355f59d4984dad7c3572999a02d6cddde04f2af5114fd110d62d0f655dc9120424db6cba753cad330ad192bb6466492fc148c1ebfe2144e708c405d4c5eeac28ea69ca11ff1d606af8d1cf282098de8260548f19465a292b77c1ec178f7f4160b35b593fb684b5c5872c0debbe3790e62c1c0b2252d51b04f9f5133585dc4f1c1638c23c7376ab619319d4cb7ac37116a943bc7d9a2fe696d7deebc39d454789bcdacb948402b9c6fb1298e34b67d1765caf51f00fe253520d7ce80bc8c04e4067156baf4a679855b2e2489a838eb3320cbf6d82cd1b71812fd4e65cca2f1a31d72209f4d9a42060faca011cc05b605919df055b81fb3f2cf309b44b44250fc1e280ac5025bde97469068c027a4d2e1b4ba1cdd6daec1c7a74d608fa7c2a4e208283c2c9598878b88379a7f2b40a82320f7575033f8d1efce5d38549656fd914732726cb2ed9905814d967ab2de197f75c87f80be4069509532517f93007da774a0566b115011f0d6404b4a8bb105e55ccab6231137dc6d4097aefab807d3d171ae31e41b0b3a7bb2ed59ab38fb0a30660f84a158714469b5a16fbd216d91214ff5548cbbc1a8651d44b6d48b47367efe35a96c3083d5636cca0289db56a139fba77d20319dee5e3c7021627e93b1e7427d6954f7033a923d369961835480093a84522a78a24d1b01c30ba4b9afaac16953e56c7eade9269c9d306d6d7d7fb8d4b67801ffdff9285a6075d8caacd7cad679aa6f25f97c235fcdff129c521f52dd33911a55bf81cd946dbed554506729c6f4bc0178b04803e41317764aff863aacbf34c0c1dd5f53479bfc4f89d1132e5aaa0b7e2b5e46dae77752705590743dd56b65c80498182da8beccf2adffdd5cab674fa77f0f611f53a636a1261dd2483212955d76db0b0d1b59c364401c99cfe5feccf0c62f59aa07f34ba60a23bd99d702b0a4922e77f3f7d293f2c6af55b72697e7e8f25d545fe13c052fcc805d42b4b4c8a5d47bdf2ed52da9bd6d556503fabb59a24e834d3efd8da37abf4385724acfa0318b61b954c3db83500ebb66eb9e764c2bcd770cba99ef7f45780d28468e150c2eada94a58d7c62b6423eb95e583c9d6790025151a0029e13264cf91de3b2d349e169e7fd7528356a84a8786401dd30cbeeb0dd894cbe2d38a7846f4859be693099cbab757af8524e47b000518d79d15ede075d02e84e3dfb092d9cd3156656f0ed90af68d6b50377a15277128f7f249d377c560bf7a094d73b552e2e685e793e440079aea56ed2661e1cf40f23f8a63c85648cad96b54ae59ba3eaee102586b7ede6035dbf89e6dfd8524a2336156826fe4fc7f0c26495226f24456ca577d03f938034e2a9f2d8691e0d166ba0c6bd7daddb1e920c6842761c54126d7b12ca074ad89ff002b5738dc75ca73eb81cf70f9a2d0cb6ff53398a5bd9fddb5e1f20207ec75dc2afe4fc40a8cae8c267c38823db2820db622da5007bbc424908d00ea0716ef83518b218b60c615b6d35ca4812ba25130bc0eebe4dafccb90c0c56ffe84643828d957d6878c3a23085ed8815212b785e054f4dff29262fbb9d9ce509f14cdda9d2b8ffabbaa5d6aa3a4ab01d59408552e555a6b62d4cd35794e5c890c9f93f993f42d38dea2c41c7ba8db41e90b95880b7ffd6d6370616809edb2744b24a6b59c127467a3372bcd6c088b0ed697dd243b1d534a0fc28ef961779ec71f8707fd2928cbf23bff26d0a00231a72583089a22a1d0d6cfadaeb31a98cda1c84eb5e8bf047a89e8687e5f100bd57d1d67a4073306f377fe43ff33634aee3173032719c4c34189265f541357044dc8dbf56540d5be66047f908beaf040db44dd57b891b1e3e4cc98be5c20c81f4be6a2398b642d81de2e9c4ba34b8801a2fcd50d8d5ba6f497923bf29662b62f36119bcbfb6df3c1c8d61cff9962699673e5b0ffbb01deb81b2044157df7e03ca3a4c9a03ae2f59e55702c2079ee48ded1dfa0eb32872d80d9b113ad5b537597226948f8ac6b8d5ed700c357e8b9a1178e6f4b86c64ce0ba042152df716681e08bc7622b9977e421f554183611f8ffc36dfa1dafa2d4b2a76d8bc524e9ff22596ae79a964c67bca4311966f05208b626eac58c658aa384798ef738b17cefa55923316a1f9780c22a5828e3a2a62c40136341fcfbc8dae32ca560758467a266c5a170a05800a726ea0d93af19a4aaddaf8150c214f8b36b75ebec966062f1a4fdabb31eba08a1b277670b2e5dff82f77a4bec5b50c28a6459d9170b1115173709d113f677de59cb9b283037f8927317972139198841d798f2118de1a8ae2689e5cff6226282c8b801936b27ffdaa2876e3d8eace08fbd3380c0e0d0f33630c1a483520b423c63443c6bbe8c0f78ec143a0721eda931d444e5355e8cfd7af0177a98e181020ca7a0d59af6b4b4da2b404f302adc2f0537a2731bb1fe76a0b49caac4428e2504d02a0d12d05f935a634e7fe376872d90df5ceadd10bb2b0dcdb09167d3d021ee952381e7f267991985dc58ce6e5510d434933792fc600e701334cc223ad8da2004f83776b423037dc91a048cc1f7a85529d0f1dd4893d6e945ac0e57a6d3caae1b553c4bbb9a45137c8a729e7402d4a3c7a62c004f73acbc108ecdf868540058f69058d0d85a0b447861253b45161d91a21d0c254e908b0be9776560fd2e7fc91696fef7911d6c929f66642aad4ddbf434ab9ccd2b2a8320a3c1d355e0c73744bc3f12af5c2b743fbe3264a1585f999ee258dccea6b022722f1c4b4ca2ede91724960dbb515d2660e3878b6049e13c04ea60bbf5de0c31abbb67e4f4faca1611fad5f8e448d27864e9926d8a642dc1ad325003bf257dbbe6cffb71e82b6e33991d3e33eaa067a3e4aee53f01b25a976ece5027a339d1d9009a656820319aef88b955898bab3271066fd7a1c73fe97aaed2ab65c23cd90c039f2284ec2757441012ce010a4338e5dea06b96d3e30c5eb90632f9043bc9ac455564bb6e3395e433836c1634b9d6ada30893995565f1ff55e4f21ad8fd24f20ef4641cdb3c2235b9465cc2adaa3d0396dc9d16c5b78d2aa0d4673436e899f9b522112733348c81ea8df1805d379c12174967567da6ab12a8fb892a06171d0dc0b0308ac1a9151929ba6d408b76c8047798d03ef2697e800d069e43968ac73d85652b2ec1af17a89a9cf90c4ce9c9578283ab6405bdebf3271cdee7d33329a572a1da59d4457b95d8b43c09a9268e16c095a76a24f16ebcc14b35f6a7fa0a0292d5d49f08dd027391769ee294fc297e2082b5663e0fa4ea1d57eeac0440ea9692fc609f272b2c713b8a21d326a31a9be45664ee4bd9dfbe3521cf3470521e05fa7355e8246cfcab12c56f45b38f32d26aa405faf491b47cd69b1d869c1111a51cf91968cde89c83fbb6f2622e0cca462ce6cf8420d37399eadc4ad98bc7afcac48e84f34095a96a7233aa5179e2f7f09f88edbf438871d73d85d304fce8a93b87191e0b1d24d3ab621ba8463a94e4157614b189805202e6f183c5b2b9ed9c03498eb661e01075a3cf9d92aa2d0def273ab4e4f44557ad0e39b8098cabb34df304cf5e9f98b059b81e52a0fe8a94077e853ad81f1614572af204297bc8dc8b306f202e454d7cce3d63726ea726c44556a580beebc49feabec4ef9dfec51b8889c702beba509ecb99c92a899a676c25df905d13729afd2310ba0d0386bcb910a400111711219cdc9fe3b3dcb6036bc4073069a7ee0562a0e74b7a6953f498ce3385c43c73c944b958b6a8741d21027931d6b6e9a1212372282e2e27f9d205ae918516617d57cc3835d5c4e94d79ad4b9cf11cd295060e97b3aeab1989f1e479cbd3abe75cf3d96ca45ba99b08bdd2954d431ab373700f232890543680435f86f20ada308cc5a288bb2d4d46735df7f032dfe6a57b196e3a167837d1c893c607a4494cdb1829d1d9989c2a3867c348c6653d6c25dc4643c301b4a77ca616a8a2c72fb6c49ac92c2d81e56045b4f190e002c83f5e21aeccfddb4301b50431ed01cabbd1ae809bdc47855abefce9e88f720a0c7266c4773c91f2b6a8115ccd901197806bb7e8b71593fbc5f617adad4acfd13aa77c3c038f589eea19aa84b10d6e57dc0509afcb08d5325dea5cfe501e17efb53b2b7b836d2fd6b0a554795e0b980c2e375510cc4e95adb350024d9ceda192e8e905ac57378a6e56a5f85aa098b3460f4604f70203baaa791df1cd1824b7e370d9a6dbeea8564340782f3819cf77b1465d83815c0d931fde82b7648d0ea5b3d9d95f515f383c73987727d13a0dc2b5c164dae511c2d9ad4923884baa8ab6a62d370c1fa09aa9161d6f2f354f6c834d7f5b77430119ef251d5cedb73bfabe18dce03f44eccb121f04aa12ffa18e9429907ea13f312470cc79d5ace21220153c7fa0c5f4d748eb813d644aa89d368377da6b12fe74d1f5b04457a79bf1d50f96d3598bcdfc0f408500ee71df89387a3ef169edcab9d1ccbb1059c0d148f66314d79bf0cd4eb6c69a22fbe92219d9a7def174f57c194e07f900393fbbe583eb296a41a9f00def5e4f646e3d0bbbb7d6be06ad91a2a4fffb264833d66e22325bfcc6659fe3afb7340a5aa2ea0524e371e666e7573da8ac4d6f1fa7000debb596503a93014e672fffa5a4ce36c24e067b896a3ca02bc93a57b71e986e113781c5a17e86a9b3d194f9e0f4a876885963ac7a2f24568a521493fff90d3f04bfb978ed08e4bac76832cfe85324417f7a53dd3116c1edc8f20d6c05e77487406c4b1d70f692c1741035f9bbae6c3ae8044a9e3fa919c55e885ab9efc6b0e187ab76cb0df0639bc0e30048584138d3a957c1fdbd43939c3e4c96f354fa2a9025e546a263706a3a437e508a9b96b6ad10bdc65ef2be4ac11fe5861c8caa963b21581ee4d2b18ce4b45157386cb8ab41bea212950d4cf71b6b9421296106a0eb2446d2648309d67ecc4a213cfeb5a1d2c188cdb60c0934bc7ce9b867001230d548f081e1c2047dd60d78d327d0dd4f7db1b23f2ef55cd3a02f85bd40ccf33a7bea13505418760bce8815cee7aeeea906c4b730db663a32ccb9fad68bfce3ae52f0a64b30c59ee707c763f8ef81a74f507f7deff192bc7f960124ebb32bf6e744200231b86a3fbb74c6a2525e", 0xf8a, 0x0)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
ioctl$CDROMVOLCTRL(r6, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, 0x78b}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000) (async)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc004000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf25040000009c000c8014000b800800090070295716080009000e05ea4e14000b8008000a00d26000000800090080a5e70a04000b8024000b8008000a007315000008000a004b25000008000a0031a3000008000900bf51c40c34000b8008000a00f69e00000800090051c9b01308000a00511e000008000900e0d12e6c08000a00059c0000080009005d90a12814000b8008000a006b7d000008000a00176b00001c000480050003000700000005000300060000000500030006000000"], 0xcc}}, 0x4000081) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) (async)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) (async)
chdir(&(0x7f0000000240)='./file0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) (async)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf8a, 0x0) (async)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) (async)
ioctl$CDROMVOLCTRL(r6, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0) (async)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="653a6d7967726f75702f6d796576656e742073636865642e73636865645f737769746368da0dc1", 0x27)
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
setns(0xc9, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000040000000e5e7aa9b00000008000300", @ANYRES32=r6, @ANYBLOB="0c005a80"], 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/fs/nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x223c0, 0x0)
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x6000004, 0x0, 0x0, 0x0, 0x4})
chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x20)
write(r8, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r9=>0x0, 0x29, 0x3, 0x4, 0x18a4, 0x0, @mcast1, @mcast2, 0x10, 0x80, 0x4f, 0x7}})
sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x70, 0x15, 0x4, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x32, 0x0, r9}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x12}, @IFA_FLAGS={0x8, 0x8, 0x59}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x7fff, 0x64e, 0x4}}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffa, 0x0, 0x6, 0xa06}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10d000, 0x10)
fchown(r10, 0x0, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001300"/28], 0x50) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b1092947d2dac51bc3bd616d8cb243de2595d28a5dc7767b0b0cf56e6dafa4efb51e08d8f9994bc73ae0c339c85525f51411e81b4c0d71a795784e07829eecb58b07d5aa9b1cc2b561bd29a155356275df68d78d2bc4d75b7386968ad226876531cbf2c54da0c6bbd58e583b697a2fc769e1319c20553a6190db335b81185a97baffe9c9c7d9b30518561766232ece52a2a6ccb3dd774db019906b4c908c56b3604719ecb176fa86bac79238db898cab7c39dceb5b76ee8b27223d35cbee98a9", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x88c4) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001900)="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", 0x1000}], 0x1, &(0x7f0000002940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x38aa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd84}}], 0x50}, 0x4000810) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@getchain={0x3c, 0x66, 0x800, 0x70bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0x10, 0xc}, {0x4, 0xfff3}, {0x0, 0x1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x55b2}, {0x8, 0xb, 0x1000}]}, 0x3c}}, 0x850)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESHEX=0x0], 0x24}, 0x1, 0x8000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0x1, 0x5}, {0xfff8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x40010c0) (async)
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff}) (async)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x418, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x404, 0x1, [@m_vlan={0xd0, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x9a, 0x6, "7d653746f870fb7326568349c5463233abc48abd02ed10225a426434eb586de618246f89eed7f60294aaa9acf8408e2640d3c2c0a9268aedbd2f2a8961761b068610f5e849a9a633a4509fc963407882e975bae7c13a882cf9bfb77ff76aeba825dd46a63c3d5e3e6222d8857ca86aab379cad709ca61c51e50df42e1221c8a64afdc41ef571c4101e54290d9c600071afe4376f2765"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x178, 0x1c, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x2, 0x6, 0x378f8a89, 0x6}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e090274e1a69"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="64326d46d547"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x747c}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="0480de8c25f8"}]}, {0xe4, 0x6, "4a3f0165a916df0aca983f97d0377dca5f2af89f2a9e8463d876c1b3574ff1574ab2e7f737df8add78fb15d7e6e5aaa0cee6cb996a376d186c5b8cd3e7d4516c7950e6207af217567372e464d88e917156b3473f99c596f5490f2dde5fa9bbb3b4d9734b8a88cdcc022331ae9151ab02002791b4d1dd9ab69646d96a42a978613ccc9f67dfea222d20b2e255312b394360f6d8bb4058206ed06cee9aaf47bc3ade5519507570f33dfd23eb6ca97336c298d5b66cc0a313146e7a84d3ec7f39d813bbbd9ce559adadf724c1ef89eccb19bf91df571938fe60abec63217124f582"}, {0xc, 0x7, {0x0, 0xd15f73e737cc668f}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1b8, 0x12, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xe0, 0x6, {0x3, 'mangle\x00', 0x2, 0x1c, "b04acd5e0b52254694bd170e787a0f2ddd1b9b420c211cb3fcb34ba006505da4d73e7d9bab2984afdd70c3598b09d3627d69675848f1e945bed6836f4f01a01f53e23ea297a27514ea44e708a942a37a9a54a833cbe2539a40da2e19304f25296bb2e969c55e1f5ee28d19c9d7bf9bd86876a29f58fa93c6d5c9d97ba38a4820e36257303b2745a4831505a36de931c868a787a9f30b95ce3f7415df29680b5ba79e54c77325af8e655102fb072ccb126de44de2b7f7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x41, 0x6, {0x8, 'security\x00', 0xd8, 0x8, "b7416f8d5120e1eb5420b36352c4b55cc3c594833024de"}}]}, {0x28, 0x6, "c80b93e73e2f03c6a9b5f66496ab0131b8ad54a9e7a036bc953f07bf2e9fc2ebad42ac82"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x418}}, 0x4000080) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="76b9dcf800c00f326635010000001f1664660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5546a660f3829544e66b9800000c00f320f300f01df66b805000000f3a5baf80c66b80e5ca48fbafc0cec0f01310f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, &(0x7f0000000100)={'hsr0\x00', {0x2, 0x0, @loopback}})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000700)={&(0x7f0000000380), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf25090000b0bd00330008003a0007000000050038000000000005002d000800000008003c00"], 0x34}, 0x1, 0x0, 0x0, 0x4004054}, 0x40040d0) (async)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async)
sendto$inet(r10, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000180), 0x3)
executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"})
executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xf, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x91}]}, 0x2c}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffc69}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd)
executing program 1:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-write-nanosleep-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-write-nanosleep-syz_open_dev$hidraw
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-write-nanosleep-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) (async)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-openat-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-symlinkat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-write-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
write(r4, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-openat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-write-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
write(r3, &(0x7f0000000840)='8\n', 0x2) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-openat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) (rerun: 32)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-write-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) (async, rerun: 32)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-openat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-write-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-openat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-write-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-openat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-write-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-write-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-openat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-write-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-openat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mount-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mkdirat-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-syz_open_dev$loop-mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-openat$nullb-mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x8000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) (async, rerun: 64)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (rerun: 64)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40), 0x0)
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(0x0, 0x0, 0x2)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(0x0, 0x0, 0x2)
mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(0x0, 0x0, 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
extracting C reproducer
testing compiled C program (duration=47.945757038s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
simplifying C reproducer
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing compiled C program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
program crashed: WARNING in usb_ep_enable
testing program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(0x0, 0x0, 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
validation run: crashed=true
testing program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(0x0, 0x0, 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
validation run: crashed=true
testing program (duration=47.945757038s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-mkdirat-symlinkat-openat-write-syz_open_dev$hidraw-mount
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)='dummy_udc.0', 0xb)
syz_open_dev$hidraw(0x0, 0x0, 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in usb_ep_enable
validation run: crashed=true
reproducing took 47m2.187181978s
repro crashed as (corrupted=false):
------------[ cut here ]------------
usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490 drivers/usb/gadget/udc/core.c:124, CPU#2: kworker/2:2/850
Modules linked in:
CPU: 2 UID: 0 PID: 850 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_ep_enable+0x3f8/0x490 drivers/usb/gadget/udc/core.c:124
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 5a b0 73 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 17 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 0a da 8c
RSP: 0018:ffffc90000658a00 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff88802b6140e0 RCX: ffffffff8cda4e20
RDX: 0000000000000081 RSI: ffffffff8cda1780 RDI: ffffffff9152b990
RBP: 0000000000000081 R08: ffffffff8cda0a60 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cda0a60
R13: 0000000000000000 R14: ffff88802b6140e0 R15: ffff88802eebbaa0
FS:  0000000000000000(0000) GS:ffff8880d5d52000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000122f2f6a4708 CR3: 000000000eb96000 CR4: 0000000000352ef0
Call Trace:
 <IRQ>
 hidg_set_alt+0x190/0xa10 drivers/usb/gadget/function/f_hid.c:1042
 set_config drivers/usb/gadget/composite.c:1018 [inline]
 composite_setup+0x2ccf/0x9290 drivers/usb/gadget/composite.c:1901
 configfs_composite_setup+0xfb/0x130 drivers/usb/gadget/configfs.c:1877
 dummy_timer+0x2039/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:1951
 __run_hrtimer kernel/time/hrtimer.c:2074 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2131
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2148
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x16a/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 2b 12 f6 48 89 df e8 3e 82 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 78 01 f6 65 48 83 3d 34 a4 b7 08 00 74 16 5b
RSP: 0018:ffffc90005137078 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffff88802b614000 RCX: 0000000000000040
RDX: 0000000000000001 RSI: ffffffff8e38df50 RDI: ffffffff8c623980
RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000
R13: ffff88802ce47478 R14: 0000000000000000 R15: ffff88802ce47400
 spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
 dummy_urb_enqueue+0x56c/0x880 drivers/usb/gadget/udc/dummy_hcd.c:1337
 usb_hcd_submit_urb+0x268/0x2150 drivers/usb/core/hcd.c:1542
 usb_submit_urb+0x827/0x19b0 drivers/usb/core/urb.c:586
 usb_start_wait_urb+0x10e/0x580 drivers/usb/core/message.c:62
 usb_internal_control_msg drivers/usb/core/message.c:117 [inline]
 usb_control_msg+0x328/0x4b0 drivers/usb/core/message.c:167
 usb_control_msg_send+0xca/0x130 drivers/usb/core/message.c:226
 usb_set_configuration+0xb8f/0x1c60 drivers/usb/core/message.c:2209
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	48 89 fa             	mov    %rdi,%rdx
   3:	48 c1 ea 03          	shr    $0x3,%rdx
   7:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   b:	0f 85 93 00 00 00    	jne    0xa4
  11:	48 8d 3d 5a b0 73 09 	lea    0x973b05a(%rip),%rdi        # 0x973b072
  18:	48 8b 4b 08          	mov    0x8(%rbx),%rcx
  1c:	40 0f b6 d5          	movzbl %bpl,%edx
  20:	4d 89 e0             	mov    %r12,%r8
  23:	48 c7 c6 80 17 da 8c 	mov    $0xffffffff8cda1780,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	bd ea ff ff ff       	mov    $0xffffffea,%ebp
  34:	e9 8e fd ff ff       	jmp    0xfffffdc7
  39:	49 c7 c4 20 0a da 8c 	mov    $0xffffffff8cda0a20,%r12

final repro crashed as (corrupted=false):
------------[ cut here ]------------
usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490 drivers/usb/gadget/udc/core.c:124, CPU#2: kworker/2:2/850
Modules linked in:
CPU: 2 UID: 0 PID: 850 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_ep_enable+0x3f8/0x490 drivers/usb/gadget/udc/core.c:124
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 5a b0 73 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 17 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 0a da 8c
RSP: 0018:ffffc90000658a00 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff88802b6140e0 RCX: ffffffff8cda4e20
RDX: 0000000000000081 RSI: ffffffff8cda1780 RDI: ffffffff9152b990
RBP: 0000000000000081 R08: ffffffff8cda0a60 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cda0a60
R13: 0000000000000000 R14: ffff88802b6140e0 R15: ffff88802eebbaa0
FS:  0000000000000000(0000) GS:ffff8880d5d52000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000122f2f6a4708 CR3: 000000000eb96000 CR4: 0000000000352ef0
Call Trace:
 <IRQ>
 hidg_set_alt+0x190/0xa10 drivers/usb/gadget/function/f_hid.c:1042
 set_config drivers/usb/gadget/composite.c:1018 [inline]
 composite_setup+0x2ccf/0x9290 drivers/usb/gadget/composite.c:1901
 configfs_composite_setup+0xfb/0x130 drivers/usb/gadget/configfs.c:1877
 dummy_timer+0x2039/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:1951
 __run_hrtimer kernel/time/hrtimer.c:2074 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2131
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2148
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x16a/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:221
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 2b 12 f6 48 89 df e8 3e 82 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 78 01 f6 65 48 83 3d 34 a4 b7 08 00 74 16 5b
RSP: 0018:ffffc90005137078 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffff88802b614000 RCX: 0000000000000040
RDX: 0000000000000001 RSI: ffffffff8e38df50 RDI: ffffffff8c623980
RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000
R13: ffff88802ce47478 R14: 0000000000000000 R15: ffff88802ce47400
 spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
 dummy_urb_enqueue+0x56c/0x880 drivers/usb/gadget/udc/dummy_hcd.c:1337
 usb_hcd_submit_urb+0x268/0x2150 drivers/usb/core/hcd.c:1542
 usb_submit_urb+0x827/0x19b0 drivers/usb/core/urb.c:586
 usb_start_wait_urb+0x10e/0x580 drivers/usb/core/message.c:62
 usb_internal_control_msg drivers/usb/core/message.c:117 [inline]
 usb_control_msg+0x328/0x4b0 drivers/usb/core/message.c:167
 usb_control_msg_send+0xca/0x130 drivers/usb/core/message.c:226
 usb_set_configuration+0xb8f/0x1c60 drivers/usb/core/message.c:2209
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	48 89 fa             	mov    %rdi,%rdx
   3:	48 c1 ea 03          	shr    $0x3,%rdx
   7:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   b:	0f 85 93 00 00 00    	jne    0xa4
  11:	48 8d 3d 5a b0 73 09 	lea    0x973b05a(%rip),%rdi        # 0x973b072
  18:	48 8b 4b 08          	mov    0x8(%rbx),%rcx
  1c:	40 0f b6 d5          	movzbl %bpl,%edx
  20:	4d 89 e0             	mov    %r12,%r8
  23:	48 c7 c6 80 17 da 8c 	mov    $0xffffffff8cda1780,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	bd ea ff ff ff       	mov    $0xffffffea,%ebp
  34:	e9 8e fd ff ff       	jmp    0xfffffdc7
  39:	49 c7 c4 20 0a da 8c 	mov    $0xffffffff8cda0a20,%r12