Extracting prog: 3m6.116047375s Minimizing prog: 45m43.806863605s Simplifying prog options: 2m35.854283765s Extracting C: 54.615215887s Simplifying C: 0s extracting reproducer from 12 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-syz_usb_connect$uac1 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x1, 0x1, 0xff, 0x164, 0x9, 0x1}]}) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000268e800401e04684040000122030109028200030108809b0904000000010100000a240101002c000201020c240202031b0104010104db0d2406040203020001000600a80924030102030604"], 0x0) program did not crash program did not crash single: failed to extract reproducer bisect: bisecting 12 programs with base timeout 30s testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30, 16, 25, 19, 13, 10, 4, 8, 30, 20, 25] detailed listing: executing program 0: r0 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000c00)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./proc\x00', &(0x7f0000001200)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001280)='27', 0x2) mount$bpf(0x0, 0x0, 0x0, 0x8144e1, &(0x7f00000012c0)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x24080, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001300)={r1, 0x1}, 0x0, &(0x7f0000001340)='\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000680)={0x1, 0x2}) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002c3d79a08fb092660dcae0102030109021200010304b001090403040099d82203dbcc2693d6fde53a524aca78b55fe77ae83acb101d4bfdd799fba1a27b668dd7eef29e797c3521f2f94ccaae0e7956c1f59ee4d862d9dc3741b450aeb4fa2828d1f50c71b890369f512538d2eba8028efeb7c9e1b4da70f4fd0c62b34d566dd0d6ddb2f5e22f742b2a9b6d65a771745f2c1b4ba5c402fa46c32f26b5bfdf12c410c7862b48d79b714122657d057e90d5077c24c31d391fd5c1695961b7"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_usb_connect(0x5, 0x9bb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102cd7ee52021048e04ad8b010203010902a909030101100109043422050202ff010a24060001540803b7f705240009000d240f01fffbffff00fc0c000406241a040028052415000108241c020007ff0f052401030e0724060001d3a70524"], &(0x7f0000000080)={0x0, 0x0, 0x24, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006c00010029bd7000ffdbdf2508000d00", @ANYRES32, @ANYBLOB="a1003bb9100016800c0003"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001e00)={0x2020}, 0xfe33) read(r5, &(0x7f0000003e40)=""/122, 0x7a) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f00000006c0)=@srh={0x75, 0x0, 0x4, 0x1000000000000204, 0x8d, 0x50, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x8) syz_usb_control_io$lan78xx(r3, &(0x7f0000000280)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="00214b0000004b213f05925b8e4cbf1edd6bec98972fafb012dc8873e9faa5bfba66e4959fd7d07f70b045fd682d8d14d61820350bd2e8971e26914c8f1015400600000000000000c1d731aded9478b496"], &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0xe84}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "dc7c21975fe6c30a8e70f33edc03bee09505d8a60c4133b19167917b94f51c04f1c34a3172f286afe315bf971db22b"}}) executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x1, 0x1, 0xff, 0x164, 0x9, 0x1}]}) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000268e800401e04684040000122030109028200030108809b0904000000010100000a240101002c000201020c240202031b0104010104db0d2406040203020001000600a80924030102030604"], 0x0) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x82084, 0x0) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfffffffe, 0x4, 0xf3, 0x71, 0x7, "ff0700000000000002000000000000000600", 0x4000003, 0x8000400}) ioctl$TIOCSTI(r0, 0x5412, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r2 = landlock_create_ruleset(&(0x7f0000000580)={0x100, 0x0, 0x2}, 0x88, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') openat(r3, &(0x7f0000000600)='./cgroup\x00', 0x440, 0x107) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x0) (async) fcntl$setlease(r5, 0x400, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') read$FUSE(r7, &(0x7f0000000800)={0x2020}, 0x2020) (async) r8 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @ioapic={0x2000, 0x5, 0x4, 0x9, 0x0, [{0x7, 0x3, 0x5a, '\x00', 0xcd}, {0x4, 0x9, 0x6, '\x00', 0xb}, {0x6, 0xfe, 0x3c, '\x00', 0x4}, {0xa, 0x40, 0x8, '\x00', 0x3}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x5, '\x00', 0x82}, {0x0, 0x80, 0x2, '\x00', 0x9}, {0x7, 0x7f, 0x28, '\x00', 0xbb}, {0x40, 0x3a, 0xa7, '\x00', 0xf}, {0x7, 0x6, 0x8, '\x00', 0x7}, {0x4, 0x4, 0x7, '\x00', 0x10}, {0x5, 0x5, 0x34}, {0x7, 0x46, 0x7, '\x00', 0x9}, {0xc, 0x1, 0x8c, '\x00', 0x9}, {0xfa, 0xdf, 0x1, '\x00', 0x1}, {0x80, 0x5, 0xb, '\x00', 0x15}, {0x7, 0x60, 0x5, '\x00', 0x81}, {0x1, 0x2, 0xe}, {0xb4, 0x0, 0x4, '\x00', 0x5}, {0x4, 0x7f, 0x3, '\x00', 0x32}, {0x8, 0xfd, 0x4, '\x00', 0x4}, {0x3, 0x7, 0x5, '\x00', 0xdd}, {0x8, 0x2, 0x5, '\x00', 0x3}, {0x0, 0x40, 0x8, '\x00', 0x6}]}}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000740)={[0x6e, 0x40, 0x2, 0x20, 0x3, 0x0, 0x106a, 0x80000001, 0x2, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4310}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, 0xffff, 0xfff) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) mount(&(0x7f0000000100)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140)) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3c) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, &(0x7f00000005c0)="440f20c03507000000440f22c0b80c0000000f23d00f21f835300000010f23f89a5ee100005400dbe3660f38827f003eff8db5000000b80b0000000f23d80f21f835400000500f23f8360f0f400a948e30b9800000c00f3235000400000f30", 0x5f}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) (async, rerun: 64) r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x81, 0x9, 0x8b}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0x2e, 0x8, 0x0, 0xff, 0x1}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x1, [{0x4c, &(0x7f0000000740)=@string={0x4c, 0x3, "f38e7884a06376e229a634de26c926d6b650b34a28cd099f1ac4d907015aafa429aef15ea782d58f720af231dd20c9d3abb3c290ee3ffd014d62d64af6590f00af328b272dbced232d5f"}}]}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x0, 0x31, 0xd5, {0xd5, 0x7, "218cb65bc76fe101c3a2470fd879f4edf68eb783fac9fedff52b7ccec46ee55a31c3accebdfccf554e3bfe0457009133a0763fcaf21165c70869cad33f20aa1acd34c386dfb836253957a3b1ab21729fce642165e5f83691d764011724dd01678917478128c9cac2dadf99d3170b9dccaf244fbf0ec90b86a1f406e4757fb7a2860643be29abda5a4152ec1926c0eab002d2ce60c1592453b7a66de939ec4397e9bb841adabb92c96fca2b67b08c668d0985056f9ffcb1b59ba18edb347d9fa81968a50457895a224c22f88d366fe0184d408d"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x20, 0x8, 0x3d, "f1946ce3280843e014204c35b48fe61cede1fc2bc2ae83d504a842e23118f0b7aed068adcea23406873b905dfe785212490401701ff2683de17fa63718"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500), &(0x7f0000000540)={0x40, 0x5, 0x5, "6585955348"}}) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f00000000c0)={0x80000002, 0xffffffff, 0x2, 0x1, 0xfffff7fc, 0x3e}) executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0)="1b54e01462ef08f20ce0a175052bb0e57feec7053f8f922942c03d9b1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1fff7d40a373e5bac000000000000003cf2547345a8fed9356c9d782908100118000000000000d074cc", 0x60) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'sit0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x40000001, 0x4f63, 0x9, 0x2, 0x7}, {0x80000008, 0x9, 0x9, 0x5, 0x7f}]}) sendto$packet(r2, &(0x7f0000003580)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000003600)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x1a8c2000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/74, 0x1000, 0x800, 0x0, 0x2}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000700)="ea9c00ae08660f6837660f3823aa0030b883008ee0f30fbdefea95fa1001b8f8008ed80f00d8360fb26bf60f076626660f2a4a3c", 0x34}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 1: sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4008000}}], 0x2, 0x810) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000280)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/4052, 0xfd4}, {&(0x7f0000001500)=""/203, 0xcb}, {&(0x7f0000001600)=""/110, 0x6e}, {&(0x7f0000001680)=""/250, 0xfa}, {&(0x7f0000001b40)=""/286, 0x11e}, {&(0x7f00000018c0)=""/94, 0x5e}, {&(0x7f0000001940)=""/257, 0x101}, {&(0x7f0000001a80)=""/129, 0x81}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d4}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x40000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x17c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "fd71e9c22ebb5be655a18dae923b48abf13510ab087ec33d30b306893cead99e43626a0ab4786fa06881d88d5d5d1eadc6ed227726a21e99ea9892fa6fc5a00bfe82fbf89e5632a9d5495d9b0568cbf6c3dc72c8945cd68ea72e6e25c2f278a0cfbacc492c1f100cd2ef1039a442d485b65d3ba28c8465750f71925b9e0c14700ccb5e814496903f3858059c9866dbd8f4bf538880b99ce82688acbd81192b59e4ddb1fd74356efd4346e7be0af3edca565e21cd033c671b57a2563ec0a28e1c58f03c6856376a93b3bb0b468f77a7288e5d8f74e2eb13640c1f25c7f1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040) executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x8}) unshare(0x22020400) r1 = epoll_create1(0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0xffffffffffffff42, 0x24, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0x2, 0x1}, {0xf, 0x1}}, [@q_dsmark={{0xb}, {0x44}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200d5}, 0x830b228ca266ec1d) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1ffc, 0x24, &(0x7f0000000280)=""/36}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x300000000000}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000012c0)={0x0, &(0x7f0000001300)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x48}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') read$FUSE(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = fsopen(&(0x7f00000002c0)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) r10 = fsmount(r9, 0x0, 0x83) fchdir(r10) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x2) getdents64(r11, &(0x7f0000000340)=""/57, 0x39) (async) getdents64(r11, &(0x7f00000013c0)=""/4096, 0x1000) getsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001380)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket(0x11, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002240)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000002280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendmmsg$sock(r0, &(0x7f00000022c0), 0x0, 0x240440d0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002380)=0xe9, 0x5) (async) sendmsg$netlink(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002440)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000002640)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200540c0}, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000010, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000021c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r5, &(0x7f0000002cc0)="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", 0x2000, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004d80)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file0\x00', 0x22801, 0x0) (rerun: 32) write$FUSE_ENTRY(r8, &(0x7f0000004e00)={0x90, 0xffffffffffffffda, r6, {0x3, 0x3, 0x6, 0x1, 0x6, 0x4, {0x3, 0x0, 0x6, 0x8000000000000000, 0x4, 0x101, 0xcd, 0x3, 0xee, 0xa000, 0x8, 0x0, r7, 0x2, 0x3}}}, 0x90) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@migrate={0x50, 0x24, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0xff}, 0x3}}, 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x0) symlinkat(&(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lstat(&(0x7f00000002c0)='./file7\x00', &(0x7f0000000980)) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000280)=0x2) chdir(&(0x7f00000005c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000006c0)='.\x00', 0x0, 0x1002831, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x1c0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e608"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="0500000040000000ff7f000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000200100aea6fcfb71c905cbad00000400ccfe002002020000b9b817681d222a49e11034505f3eb5f5b954d487a6ef529f61dd98fb1734a9805c8d93200e6f4d107127724769b139d4d60124515d72865384697b50863d7f0041f79b0434955ed6c8c37ee5575076db12d181390f67ef15d5912de8fcc1aaaf44bb6cd36930d9edeac526a582fc4fb890aeb9ae2d1b025f814a78ab219a5fb995998bb70a695e72892510c22e66563629b04eeec627e1083773efdd2d9913b9b7d0ae85a15a9573e73559f527a50a9c80bbf86f3fdb8a31a2093597bb3c139da756c3756f643400"/238], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x240048c0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-syz_usb_connect$uac1 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x1, 0x1, 0xff, 0x164, 0x9, 0x1}]}) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000268e800401e04684040000122030109028200030108809b0904000000010100000a240101002c000201020c240202031b0104010104db0d2406040203020001000600a80924030102030604"], 0x0) program crashed: BUG: scheduling while atomic in gadgets_drop single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x1, 0x1, 0xff, 0x164, 0x9, 0x1}]}) program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) program crashed: KASAN: invalid-free in gadgets_make testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) program crashed: KASAN: invalid-free in gadgets_make testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-openat$kvm detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-write-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="061be16ed0", 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in gadgets_drop testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in gadgets_drop testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mount-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-sendmsg-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-socket$key-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-mount-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mkdirat-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$hid-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$uac1-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x0, 0xf, 0x91, {0x91, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e"}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in gadgets_drop testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='100', 0x3) r4 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet_udp-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000100)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x0, @broadcast}}}, 0x88) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in gadgets_drop testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, 0x0, &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', 0x0, 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480), 0x0) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM program did not crash simplifying guilty program options testing program (duration=50.588933684s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in gadgets_drop validation run: crashed=true testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: BUG: scheduling while atomic in kernfs_remove validation run: crashed=true testing program (duration=50.588933684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet_udp-setsockopt$inet_MCAST_JOIN_GROUP-syz_clone3-syz_usb_connect$hid-write$tun-syz_usb_control_io-syz_usb_control_io$hid-mkdirat-mkdirat-mount-openat-write-socket-syz_open_dev$loop-socket$inet6-sendmsg-mount-mkdirat-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program did not crash validation run: crashed=false reproducing took 1h1m19.952452269s repro crashed as (corrupted=false): RAX: ffffffffffffffda RBX: 00007f9724225fa0 RCX: 00007f9723f9fb19 RDX: 00000000000001ff RSI: 0000200000000280 RDI: ffffffffffffff9c RBP: 00007f9724037b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9724226038 R14: 00007f9724225fa0 R15: 00007ffefecd32f8 BUG: scheduling while atomic: syz.4.26/432/0x00000002 Modules linked in: CPU: 0 UID: 0 PID: 432 Comm: syz.4.26 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6690 schedule_debug kernel/sched/core.c:6717 [inline] __schedule+0x1752/0x2380 kernel/sched/core.c:7788 __schedule_loop kernel/sched/core.c:8046 [inline] schedule+0xc1/0x170 kernel/sched/core.c:8061 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8118 rwsem_down_write_slowpath+0x5cb/0x1b60 kernel/locking/rwsem.c:1239 __down_write_common kernel/locking/rwsem.c:1383 [inline] __down_write kernel/locking/rwsem.c:1392 [inline] down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659 kernfs_remove+0x87/0xc0 fs/kernfs/dir.c:1570 sysfs_remove_group+0x22d/0x250 fs/sysfs/group.c:321 dpm_sysfs_remove+0x99/0xd0 drivers/base/power/sysfs.c:837 device_del+0x241/0xcf0 drivers/base/core.c:3856 device_unregister drivers/base/core.c:3922 [inline] device_destroy+0xb0/0x100 drivers/base/core.c:4521 android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223 gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075 client_drop_item+0xac/0xf0 fs/configfs/dir.c:943 configfs_mkdir+0x807/0xb70 fs/configfs/dir.c:1423 vfs_mkdir+0x58e/0x810 fs/namei.c:4265 do_mkdirat+0x240/0x530 fs/namei.c:4288 __do_sys_mkdirat fs/namei.c:4303 [inline] __se_sys_mkdirat fs/namei.c:4301 [inline] __x64_sys_mkdirat+0x8b/0xa0 fs/namei.c:4301 x64_sys_call+0x2ba8/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:259 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9723f9fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9724d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007f9724225fa0 RCX: 00007f9723f9fb19 RDX: 00000000000001ff RSI: 0000200000000280 RDI: ffffffffffffff9c RBP: 00007f9724037b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9724226038 R14: 00007f9724225fa0 R15: 00007ffefecd32f8 BUG: scheduling while atomic: syz.4.26/432/0x00000000 Modules linked in: CPU: 1 UID: 0 PID: 432 Comm: syz.4.26 Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6690 schedule_debug kernel/sched/core.c:6717 [inline] __schedule+0x1752/0x2380 kernel/sched/core.c:7788 __schedule_loop kernel/sched/core.c:8046 [inline] schedule+0xc1/0x170 kernel/sched/core.c:8061 futex_wait_queue+0xfc/0x240 kernel/futex/waitwake.c:376 __futex_wait+0x15b/0x3d0 kernel/futex/waitwake.c:677 futex_wait+0x128/0x7c0 kernel/futex/waitwake.c:706 do_futex+0x32a/0x510 kernel/futex/syscalls.c:132 __do_sys_futex kernel/futex/syscalls.c:209 [inline] __se_sys_futex+0x13c/0x320 kernel/futex/syscalls.c:190 __x64_sys_futex+0xe9/0x110 kernel/futex/syscalls.c:190 x64_sys_call+0x227f/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:203 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9723f9fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9724d890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007f9724225fa8 RCX: 00007f9723f9fb19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9724225fa8 RBP: 00007f9724225fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9724226038 R14: 00007ffefecd3210 R15: 00007ffefecd32f8 final repro crashed as (corrupted=false): RAX: ffffffffffffffda RBX: 00007f9724225fa0 RCX: 00007f9723f9fb19 RDX: 00000000000001ff RSI: 0000200000000280 RDI: ffffffffffffff9c RBP: 00007f9724037b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9724226038 R14: 00007f9724225fa0 R15: 00007ffefecd32f8 BUG: scheduling while atomic: syz.4.26/432/0x00000002 Modules linked in: CPU: 0 UID: 0 PID: 432 Comm: syz.4.26 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6690 schedule_debug kernel/sched/core.c:6717 [inline] __schedule+0x1752/0x2380 kernel/sched/core.c:7788 __schedule_loop kernel/sched/core.c:8046 [inline] schedule+0xc1/0x170 kernel/sched/core.c:8061 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8118 rwsem_down_write_slowpath+0x5cb/0x1b60 kernel/locking/rwsem.c:1239 __down_write_common kernel/locking/rwsem.c:1383 [inline] __down_write kernel/locking/rwsem.c:1392 [inline] down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659 kernfs_remove+0x87/0xc0 fs/kernfs/dir.c:1570 sysfs_remove_group+0x22d/0x250 fs/sysfs/group.c:321 dpm_sysfs_remove+0x99/0xd0 drivers/base/power/sysfs.c:837 device_del+0x241/0xcf0 drivers/base/core.c:3856 device_unregister drivers/base/core.c:3922 [inline] device_destroy+0xb0/0x100 drivers/base/core.c:4521 android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223 gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075 client_drop_item+0xac/0xf0 fs/configfs/dir.c:943 configfs_mkdir+0x807/0xb70 fs/configfs/dir.c:1423 vfs_mkdir+0x58e/0x810 fs/namei.c:4265 do_mkdirat+0x240/0x530 fs/namei.c:4288 __do_sys_mkdirat fs/namei.c:4303 [inline] __se_sys_mkdirat fs/namei.c:4301 [inline] __x64_sys_mkdirat+0x8b/0xa0 fs/namei.c:4301 x64_sys_call+0x2ba8/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:259 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9723f9fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9724d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007f9724225fa0 RCX: 00007f9723f9fb19 RDX: 00000000000001ff RSI: 0000200000000280 RDI: ffffffffffffff9c RBP: 00007f9724037b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9724226038 R14: 00007f9724225fa0 R15: 00007ffefecd32f8 BUG: scheduling while atomic: syz.4.26/432/0x00000000 Modules linked in: CPU: 1 UID: 0 PID: 432 Comm: syz.4.26 Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6690 schedule_debug kernel/sched/core.c:6717 [inline] __schedule+0x1752/0x2380 kernel/sched/core.c:7788 __schedule_loop kernel/sched/core.c:8046 [inline] schedule+0xc1/0x170 kernel/sched/core.c:8061 futex_wait_queue+0xfc/0x240 kernel/futex/waitwake.c:376 __futex_wait+0x15b/0x3d0 kernel/futex/waitwake.c:677 futex_wait+0x128/0x7c0 kernel/futex/waitwake.c:706 do_futex+0x32a/0x510 kernel/futex/syscalls.c:132 __do_sys_futex kernel/futex/syscalls.c:209 [inline] __se_sys_futex+0x13c/0x320 kernel/futex/syscalls.c:190 __x64_sys_futex+0xe9/0x110 kernel/futex/syscalls.c:190 x64_sys_call+0x227f/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:203 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9723f9fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9724d890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007f9724225fa8 RCX: 00007f9723f9fb19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9724225fa8 RBP: 00007f9724225fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9724226038 R14: 00007ffefecd3210 R15: 00007ffefecd32f8