Extracting prog: 4m15.840580231s Minimizing prog: 20m11.75616315s Simplifying prog options: 0s Extracting C: 26.402981309s Simplifying C: 11m32.015256802s extracting reproducer from 66 programs testing a last program of every proc single: executing 16 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-getdents-mprotect-syz_emit_ethernet-bpf$PROG_LOAD-bpf$PROG_BIND_MAP-bpf$MAP_DELETE_BATCH-socket$pptp-lseek-syz_mount_image$ext4-creat-write$UHID_INPUT-fallocate-sendmsg$nl_route_sched-socket$nl_route-sendmsg$nl_route-openat$kvm-mmap-socketpair$unix-fcntl$setlease-ioctl$KVM_CHECK_EXTENSION-openat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_kvm_setup_syzos_vm$x86-timer_create-fcntl$lock-timer_settime detailed listing: executing program 0: unshare(0x60000600) getdents(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x5e, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) lseek(r1, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r2 = creat(0x0, 0xa4) write$UHID_INPUT(r2, &(0x7f0000002180)={0x8, {"7fda3706741c0c3de58bf77e2cb663038ea93754da43ffb9e302a7cd120bbadfbc1acfde238b08109e8da2fb2b03e4bf68b31bca2f7140a5ac11d69e32d1633f8253d29e2996e0a2318a65b842c35dafd89d0092b5b80039ebfc6e28b25cc1737e4337566e10a0b867a96b33c6f7d6499fc7a9171d59201982310cdedc70e1cf82512268ed4f03fc6b8034e3499c0fcbcb896a4227e8164620b323b145baaa45c3c119b68fb87881257b5238c76c24b25f580a09c76d0ce9a6556a0e1c1d4a410ed2057f8bce7811156a67bc0695cfafd3a12bce1d06820a9b9725a163d69ef9e6f515e46cfeec35994811f5ec0689b0e62c573caac39696915de880e4653f20fd83b226b11942a578909e121219c41e41f5a7bb5144b2af6841a105a79ad4560f4155bcf427c391cf5e1a14039506bcc7117da942161d391b73c05b9c7b2758ca72654d5891aa7d863bcc8f456ed9c5d2a3e5be25196d074bbd73b75161cb2cee765256f28573c27dab7bed271d9b3a5f58ed82f25205e35d956ab10c83d449985003148312fb72e5a4bb1e52a2e6c9977cbc6334023110946d97b108183668d87c4bcb01355206606e4f7275e06221da58165471a06af43a487cf81850567a1337dfe830552712e43f746106a074095dcd0864e16dd3226609217189551cbf1fa7c18016cd528056e13b63575cad98941bb04afd51223dee0048fc36b375a6fc3e5cdd37a56109b6de60fff9a316fd242f3ab5e4c64119d9b8543dce9db6cea65590b21fe340c3267719e0723f1239afe0ed2a5992b1acd739c0fbbec7eeb2fb3de1c051cd529ca8d85cebb0de8a3a84221ec5a10574590e485168b40783589f09aa5ada32565393433c9f6db4645ad625cb2d9af13f57c424798df8e1fc57552f36100efb62a370ff9095b4f0423dfdb41b3286c3b7a783bb43edefb5e1691d691ae6f915a4629bfa25da7466c80f05d80e0083026f3d02cf9701cf3753e06511af84641159d19ea67c43f0ef99f641bc4ffd42516eaa44f11e51d1e770f75b7f36f5b3e56a3ea29aed6a0e9921e8498aeae8692d1473337a92801e01a17159aed13f0375d248b8403810695a66d4fe0747234b448e075f20ec7c1d44e425d029afc5835cd7568441755ad29e4c8970d124adb9a2eddb5a4b197db61039f82fc5c5592846c84af4e92eac014777d4de53798c83e864e3f990584051f0ff87be3749cfdfe4abede9ad5b64817925c54e47c5fb9e8de2be943549e339410b739c2be2bf555e820eb5df397c22fe9ec468d2d979272c347e17315b2d11db490daf620173c430403ee2504b885bc97ab30d032840ff661cf0200eb1763b4093b686582f0086f7c4ece97ebcbe1f6a71b3395294a2d769f5b667085789c7c538314644d1d20f3dc4544eff0f70f3b7b1087417e36bf8e5f6ffab3a4cf6824402f9649555ec1ebb3375e182ec086181237cca700243e06d6a0d9135395160bfd4790bdef0787973567346d481f21d924e41f3d88e9133577e3e60a5b2feb0ee5e6c3131513a7b0c2344bd96af71d964a9ce14df0fc2aa4b83b64a3ce5646076ed74133a31b132e4f21bc25a8f51e368ee23b7f8ec2d9521fe85a63dea29013748cc1bdefae5dedf510836ae15bb234c7aba5489563b51060a5a4776dbf84411b19a014a922b4779c8dd56741d0c0c9b16cd2fcd28a379398a4f8634b8ff8fdf211abdb75d037255b9b0345cad1e2b9f9a6adc5186c9f2c54f8911620bb59f1cc1c7e36f63a29d3a0d66b6f79e0b79090235e661775795c7e5480f91edff25d421cf718ffddc809d4791f9d114c05d4a5408d17396d9ee8ef836447984bc3fb462888e79f467553a3f09b30e782a41fab516355adb32cae71d9b64652552da8d8aa9c12ace42769e9621d84e10c198d1d7a7f61c1aba68907f56be4f17ce737bd5037ce51f13387d933cf7834d4ebfc64bec7c5b5e7cf5c0eb513baed6ac96c88dbe4d66be6f8a6d7882c61b98bcc84dc1b89d3f8cb387ccbbab54502bcccc5d45aa7f1ae37f821a51fe437522dc3fbbe68fed7bd61613ac5dc26daeb56efc0b23d404799d0788252673fce1983a79b5a5706182b3fc9154144ee57d40e75f36133729be10dc2775d304694bdf2eb33ee02a9abce98bced1b824971225b0e7c217b297e7d53c88d605c8985a1a49c8a0882ed39acffc439c8d679faa484f00f001da6000741cd1b37be1b40137a426b1679bdb221bccd04af1a6110a973fef792cfb5a072ceb708e3b6b9a74d5190a8c95fec0a495c6276c9d425b254493059aca3c3d4c0838769b0561d9ab58784f96f7a0737e280081a38a247131d5ad0e943f56ca6cd4d7f04b343225bda0f33ee40a8196dcf7f2c709abd927791948ab26baf3eaef7a07c0aa10784203c10530762b598a8fdc8eca05d09b3b29da83532d30f9ca1e2c08fa05c71f1cfd0098d7eb2fdaccf0a7332986aaccb1e70b9972c281c04e5b6891dce25c4afdfa386433daf068c0ecf962e231cf1a7a4443234065d8e2742de8310496ae0e98b41e324cfd904780bf8a4f7512258cfc515aa929eaba46e6319d4152fd4dc2c44dc973ef9b5add2be7c966e2203d8c44c0b6d7c0e8784a0a3fc4b806deb0a79eb0161149f2af125dd25ec2b356d64bfd8873fbee2c5b078dbe8115636efd961370e5a1de59a39cafd326f6c66ed24ada5e67972cb11f851968e57e3bc1ac3e32ea5b16a8c4aa75b1a69f9ebf0ee799974b107b81c88ecbab651e6e905d2a8427383ab21a82ceb00f04aae2973f01cfc859d13480067aa83faaa3140c5e42c81f88789a499e1aac55299b21c9e55703cef2aa976165a97d418b6031a0a10871e749a4d4e7347a1fffdb0ff05e978eb19b29c605c178857082a46b7c7c333013909d2182df26f4c55d4b43fbdd62591cbd4d221b3e6fd195c01dc712749c86226d948cd45fce5a1cc8992d2e96664c323f043429a903d2f09b3cc3f0dbb525a6d723ee6a15a0121207f4ca928abe0347bac460fdd460a447f9320ee798b81e6fa617d13c9c765b2ea15cbac4b2f1d69d415bbfe692df34049c23eff7aa4250864b11028e48944cfaa73534b6c82c68bd48ca2a4a90d4c0057cde910f2cfb79820d6d641b0716c74e70402b45da2d9f86a96bcb404de5be0bfd173c207d9ca1db7b20d121cb78a6ed2667ab24b79783b3f9f436862e89f5e41829008c6dfe187dc06ee6e87b6be64059397d283a4b7a30eb01924ffaa127640e79e2cf9b6f0fd0b45c2ef77becd20fff5e3236824dcf6c3d6b2175b00f20bfe48a543d01a5827519bde600016d4a9e866751f0981f683809792efe96e18ea978312b0910f2b1492c786967049a6b93dc959ea622abd0a0eb1a472ecfee838740ef25cf2939cc9bfbd9f6acfa64a72407848183fabd451ac001c1fb2656bc41603f9e0cc2ffb39aea0bcfaf82ecbc5feb668ad118e7ce944602e9c277c0df573a6ced3b9578d4066e5edb733c3fe71dd7dba045660347770a81695247621e540cf1558fb4d8c4b3f68e0da99af0816ede240e038e4fe77b39e3b7fed3eafec0560ce6e6e564d5b69e550adf4bd8ffa68bb7c7c09a5597afc8d1e967b1093692a578a70e8564cfa26826b4add2c9523669b85b7a0f9c3ed8298691affef59411b9a3733f94c416eef5b5056a14cabb75e880ac1e2359a85068c354485fb0eb8b2ae799f192a1915082ad4d153311008e84872189a19fa34c73f37e2ae0890aed3748111bda52bf613e0c9d2755c4b4e0d283eb023283568ae91ef4341cccfa6842cf97f52080e0b3af4cd520c9817385da8d6d34730e31f39f1f3479b254dd589baf5766873e8da6b8356dff6389d3e74b04ff78f998bf8ecbce5bafd4e187e14fe5c238fd8472ed8edcbe05c9a291bfb1c7b607808a76060fb6759f89cef41e92ce1cb845dfd6328d3c71ff921fe5a6f58bc3ae124d221d80c89f9ab40bdd7c841dc7f3bb14d7a51d2decf17e7858a7d2d1be813c25eb790e3467019291d44f4ea5d8d917b078b9f8faa75d27a5e3bb7965c72bd618780fe32c3c34f409afd49ee90c1a1c3bd668bf4facd0b346f145c4a70fd33d0dd17c5214fd48b65a760f076757bcf8b16f58a9a1ebf916b2980a4c6a7e9368a9bffccd5f814e367583986a27c1eda7b4f97047d018fba2666a80cf93bf301589b8e92cdd4b6b02582aebb605977e2725585e6b098638131de8baee3a55791258de78c100643dede61013d771d429b2c634bb67c17b56147c058e65d169bcf6439f33ee4fd7e45c86e3f2fe4fd4780634256011df65f78c462ee0841ca0349f14741d3576ffe8c072772012e3c65826e754907c5c3cdcda9b29b55725622df7028be126868034549ccd65982860725a00d9e1071bde01f214ffb3745ca96729fe2cb29cb0f87a48266539c85f4bad8fabce1664ed0b870df4b03b8c66a9a66fb3eb9f3aa9b65edaead897bd6bb695380daf3aa306c2cf110890dfc863e26758378999de3b51e9efabc452adc0a913587f98b4b1d2ca9619f2ea6c181745e546500561339c1878ab8df19467688552d1a6d93b977af27e7d03e6af72d78f391dcb72cb51e93367c11e0b2002ff552fccd1b91d855f27b902a1c7e397c27406ac08501ed95cf697220fe4475dfdc7893dd6f64e7fc470a165cf0bbe7f6c8347863827c57f4558184c699ec98fdb8327722dbb2c52a27562729459c324115cbff1e675205fd80c11be617c789b1a5e60b269f019bde48b49d6e65c7f2c4e2fe1fdd007e8987dbb67cfe63291819015ef46ff31b9ee0eb08b9a2dcc5bc58c0d5efbb1c94fdf0488bf93ea703558545a65ba465908cc269a35d73391aa687bedf2ba2386bd6e0a085461e658df84a03cf917d1f082948698798ed2673db775ec7f2bd08e7be0ed07bf9fc9c78955253161211db9c4b0e06dccbe9dd3b63c763cc25fa3232c4f95c2a9d8f312ee16ca9387ea8d231b6c3ce34a1a5a29588a8193bed98bcd867c07ae5e2f853a320a58b01bbaa57998eef25798fd8d8fb4da1d2edc12f6c0222ccb3072f990bac2c417ebab6dde9693ce067e6c3535238d03e455958051a57d2cb6e0634983a83034f83a0e8625a2dde2da2e208dc3efe24a05d754a3519cdf6995c9e7cfbad85bce00c63615233119c7fd7547adfec7b7ae21c5b404ba1c6630edf770fd114dde3e8be43445504145ab1be1625abca0c85aba8251684527808f4c5aeed1a59829d2c9ee48f394058ed94c0cfab25b99cc3b2e0866f843838d328c01e09ff40c309c03237b2bfae7f369eb7514b34f0453efffcba0150cbcf36d673f47b696349122f20c75d00fdec7331264d3b269d2da52f831ecbe74260256be26d2f6deadd7193494ec3d713f7f59469dc7501af253494f3df66cbf07ad34076a0326ef21f71d5f6f0083ec31589c1f49ad75e03f2d9a53500876dfa9e87d026e3f8a4155268d59142166396e2bdc5470e204116740f3a8ffe717d6437c3ad8725130720b4ddf118f152b99a01ca3d9362fb6db7958c752484d6e3de9b15f2015c1b14cc75693324938e1bfe76f09a550690556d572f09a4bd51bbb70a11db82d9fc4d7353be3b81a34bb585fe5651a9631d42d24c57802aaeb19fa7c9d0b94b4dce19bf21b5d511e4f6629fc729ce2189c0e6b4fd2bcaa611e2df449c6f8f1ab08ff23855ca7496486e66e158819089c167a47409d0d10e4c79857cc4cd13b67c6b90a48577b8ff249beaff6ba89ef37b5a55d1b654c05b4c0bdcbec206c60053d9118a347", 0x1000}}, 0xfffffd96) fallocate(r2, 0x0, 0xbf5, 0x2000402) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b643, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x8f) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-waitid-userfaultfd-mmap-ioctl$UFFDIO_API-socket$inet_tcp-setsockopt$inet_buf-socket-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-readv-ioctl$UFFDIO_REGISTER-syz_genetlink_get_family_id$tipc2-syz_genetlink_get_family_id$ethtool-ioctl$UFFDIO_WAKE-geteuid-socket$netlink-pidfd_getfd-setpriority-timer_create-mprotect-socket$tipc-listen-setsockopt$sock_timeval-accept4-timer_settime-mmap-sendmsg$nl_route detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd) r0 = userfaultfd(0x80001) mmap(&(0x7f0000344000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x800000, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe44, '\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x4000000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) geteuid() r5 = socket$netlink(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x80000022, 0x2, @thr={&(0x7f0000000580)="f904c751237c7d9486209866a672513763290d77e37a6826869258811cda514b86857fe1924d1bc06ab712adff79548c4a1c9936213c7eeac21dade2db896da292fcabf6a0f4bc4950664d33d2fb3b55f09cb2e91f19135e7bf4683062fec5f630870f89c0959f36759ed8c3231f27f77a3814b0d7d51e757c88f505182f4080ff901ebc4973db88ff2c9e4787417d71a0159a921d6a03570a01e886e3908696c3e6dfd7d2f8d306fe81560ff5e98aebd84135484bb6af7a8ff54464096609a2e63a0a92eb5c8e01ae77d90e7060c20d2153bba3be30f22591e367d75190fb7999ad5aa3cc", &(0x7f0000000680)="272df1c1f3ed85e929081f7a0169ee37a3a692b622c19d54f1f15b174131eaf5f846594dfa0fe1866cfca2dec29dc49db097e695b175f5beeb9419d4b09bf1165c3c0f4eec76992bc47a200a80d3b03cb06eabe760fdaf5b5d06a5aaa893dc3e7a4dfd6727130d17e772fe3f2adca1cf45822e"}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x57, &(0x7f0000000040)={0x0, 0x2710}, 0xffffffffffffff55) accept4(r7, 0x0, 0x0, 0x80800) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_usb_connect$midi-syz_clone-gettid-timer_create-socket$key-socket-socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$nl_route-ioctl$sock_inet6_SIOCSIFADDR-truncate detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0479a, &(0x7f0000000d00), 0x82, 0x4b2, &(0x7f0000000d40)="$eJzs3M9vFFUcAPDvTH/xm6qogEQrxNj4o6UFkYMHNZp4wKjRA+qptoUQCjW0JpYQqMbgxcSQ6Fk9mvgXePNi1JOJiSe9GxKiXEDjYczszsB226VL3XaB/XySZd+b92bfezPzdt6+xzSAjjWQ/5NEbIqI3yJiazW6MMNA9e3q5TPjf18+M55Elr3+Z1LJd+XymfEya7nfxiIymEakHyVFIQvNzJ0+PjY1NXmqiA/Pnnh3eGbu9JPHTowdnTw6eXL04MH9+0aePjD6VEvambfrys6z07t2vPTmhZfHD19458dv8vpuKtJr27EivYs3DeQN/yurqE97JNb/r+JuNZtrwkl3GyvCTemKiPx09eT9P8uyczVpW+PFD5fZfeMqVw9YRfm9qW+J7cV9cT5rKLlhKnA7SKLdNQDao7zf579/y9caDj/a7tJz1R9AebuvFq9qSnekRZ6eut+3rTQQEYfn//kif0Ur5iEAAJbxyfjnh+KJpcZ/adxXk29LsYbSHxF3RcTdEXFPRGyLiHsjKnnvj4jtzRRas0BQvzS0ePyTXqzL0tLVhXz890yxtrVw/JeWKzT9XZVYdQzYHz3JkWNTk3uLYzIYPX15fOQGZXz3wi+f1m97tnivHf/lr7z8cixY1ONid90E3cTY7FhlUNoClz6I2Nkd/2ZZVtf+5NqBTiJiR0TsrEabPf5bysCxx77e1SjT8u1f9HHXteBKyL6KeLR6/uejrv2lZPH6ZO/mdRFRXZ8cXhdTk3uHy6tisZ9+Pv9qo/Kbb//qyM//hoXXf5Hy5VwR6H+7dr12JhqsXG5qWMb53z9u+Jtmpdd/b/JG5fuoXHZ9f2x29tRIRG9yqBJfsH30+r5lvMyft39wT55Str/cM618x0Vx/h+IiF3FetmDEfFQUfeHI2J3ROxp2PqIH55vnHYrnP+JmvOfRP31v/1s9b08/3M3Heg6/v23jcpv7vzvr4QGiy2V779lNFvBlR85AAAAuH2klZmbJB26Fk7ToaHqf+zdFhvSqemZ2cePTL93cqI6w9MfPWk507W1Zj50JJkvPrEaHy3misv0fcW88WddUYkPjU9PTbS57dDpNjbo/7k/utpdO2DVLbWONrrEA23Anae+/6cLo+deWcvKAGvK89rQuZbp/+la1QNYe+7/0LmW6v/n6uLWAuBOlPW5/0Pn0v+hc+n/0Lnq+n9X/NqumgBrqPGz8buLHCt65L8mcGB9az5HYHHgtaGb2asvWll6pAu2ZH1tPxqNA83/PYjVDrx1a1SjiUA7v5UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa578AAAD//8Ev5RQ=") syz_usb_connect$midi(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x22}}}}}]}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$key(0xf, 0x3, 0x2) r1 = socket(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r3, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r3}) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6-bind$inet6-connect$inet6-openat$kvm-syz_clone-epoll_create1-openat$sysfs-epoll_ctl$EPOLL_CTL_ADD-sendfile-openat$tun-ioctl$TUNSETIFF-socket-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socket$nl_route-sendmsg$nl_route_sched-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-sendmmsg$inet6-sendmmsg-splice detailed listing: executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) sendfile(r3, r4, 0x0, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4, 0x1}]}}]}, 0x3c}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r11, 0x6be2e000) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="2100082672e76eb36e87d36e469076ac4931e868415fab6c187979d9e4ef69dc19ef588c6684dcee363c4a1a8f756b0b2222c23e8d4b709372f9e7106da6e7308085b3ac2574d088", 0x48}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-mount-openat$dir-openat-write$tcp_mem-syz_usb_connect$rtl8150-syz_usb_control_io$rtl8150 detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) r3 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x22, 0xda, {0xda, 0xd, "a4f86d29c3d9e7eee19857e6d6deffa05e899f4402484af1294f8a6f2326f7761fa78640766d6e7c3f65b4d8533530ae2cc62b2501e62d5f729c4084d75a874d3dfa732fb9eef935de6701f292ceb45f50a4cf0af56a7c4748ca847ace3065a750901120907ac2a35631a86c2927cf05af3ebf665a2b56b4d9dedbfd0565da21cd723dd5a85c31afceee5dcd13f697c8ef9997376535dc61c71fdcefef828a6473a3156841458337e8cbee663cfe7e6e5f321d8713ab111023ed952d5a40c950259055f842115ea93325dbcf8c9ae9f9b4fc2aad663e42ff"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0xe, 0x9b, "7eadda20cabac7e74ea7dc41f9175c2f42470dd37ac7a566efda0a475cb9f82dc0732ae87793cbf9dfee80dd40abe7c37af4ff07943d552c23dce731c811bcd8e11e2eeddee1ee6d01465080e75aba825f0f84ed8875084205650006084db9847aadc909f3aac46f8504e986db83ba292746a451e89370dce10a7c56d50fd1696ed1cb227914f2ee6e312d15c521170123cb9da48e8b7f63c151fc"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0xc0, 0x5, 0x6, "e57924ed2966"}, &(0x7f00000004c0)={0x40, 0x5, 0x2, 'zu'}}) program crashed: general protection fault in usb_driver_release_interface single: successfully extracted reproducer found reproducer with 17 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-mount-openat$dir-openat-write$tcp_mem-syz_usb_connect$rtl8150 detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-mount-openat$dir-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-mount-openat$dir-openat detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-mount-openat$dir-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mkdirat-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_open_dev$char_usb-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-write$cgroup_devices-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03"], 0xffdd) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-openat$tun-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20004800) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface simplifying C reproducer testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program crashed: general protection fault in usb_driver_release_interface testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem program did not crash testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-mkdirat-mount-openat-write$tcp_mem detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) program crashed: general protection fault in usb_driver_release_interface validation run: crashed=true reproducing took 38m55.40219704s repro crashed as (corrupted=false): cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 0 PID: 410 Comm: kworker/0:24 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: usb_hub_wq hub_event RIP: 0010:klist_put lib/klist.c:212 [inline] RIP: 0010:klist_del lib/klist.c:230 [inline] RIP: 0010:klist_remove+0x150/0x300 lib/klist.c:249 Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a2 5d 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 84 5d 45 ff 49 8b 46 20 48 89 44 24 18 4c RSP: 0000:ffffc90002fc7480 EFLAGS: 00010202 RAX: 0000000000000004 RBX: ffff888115eaf448 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8676fae0 RDI: 0000000000000020 RBP: ffffc90002fc7570 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520005f8e80 R12: dffffc0000000000 R13: 1ffff920005f8e94 R14: 0000000000000000 R15: 1ffff11022bd5e89 FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0f8aa08f10 CR3: 0000000117071000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __device_release_driver drivers/base/dd.c:1203 [inline] device_release_driver_internal+0x67e/0x7c0 drivers/base/dd.c:1221 device_release_driver+0x19/0x20 drivers/base/dd.c:1244 usb_driver_release_interface+0x140/0x1b0 drivers/usb/core/driver.c:632 cdc_ncm_unbind+0x2b3/0x440 drivers/net/usb/cdc_ncm.c:1001 cdc_mbim_unbind+0xec/0x100 drivers/net/usb/cdc_mbim.c:205 usbnet_disconnect+0x1a9/0x3a0 drivers/net/usb/usbnet.c:1611 usb_unbind_interface+0x212/0x8a0 drivers/usb/core/driver.c:459 __device_release_driver drivers/base/dd.c:-1 [inline] device_release_driver_internal+0x531/0x7c0 drivers/base/dd.c:1221 device_release_driver+0x19/0x20 drivers/base/dd.c:1244 bus_remove_device+0x2df/0x340 drivers/base/bus.c:535 device_del+0x62e/0xe60 drivers/base/core.c:3453 usb_disable_device+0x3a8/0x750 drivers/usb/core/message.c:1470 usb_disconnect+0x32d/0x870 drivers/usb/core/hub.c:2315 hub_port_connect drivers/usb/core/hub.c:5343 [inline] hub_port_connect_change drivers/usb/core/hub.c:5644 [inline] port_event drivers/usb/core/hub.c:5810 [inline] hub_event+0x19c2/0x4220 drivers/usb/core/hub.c:5892 process_one_work+0x6fd/0xbc0 kernel/workqueue.c:2301 worker_thread+0xa8e/0x13c0 kernel/workqueue.c:2447 kthread+0x324/0x3b0 kernel/kthread.c:313 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 Modules linked in: ---[ end trace 273854350aae34c1 ]--- RIP: 0010:klist_put lib/klist.c:212 [inline] RIP: 0010:klist_del lib/klist.c:230 [inline] RIP: 0010:klist_remove+0x150/0x300 lib/klist.c:249 Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a2 5d 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 84 5d 45 ff 49 8b 46 20 48 89 44 24 18 4c RSP: 0000:ffffc90002fc7480 EFLAGS: 00010202 RAX: 0000000000000004 RBX: ffff888115eaf448 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8676fae0 RDI: 0000000000000020 RBP: ffffc90002fc7570 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520005f8e80 R12: dffffc0000000000 R13: 1ffff920005f8e94 R14: 0000000000000000 R15: 1ffff11022bd5e89 FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000019e4dcc33000 CR3: 00000001294ea000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 28 02 sub %al,(%rdx) 2: 49 89 df mov %rbx,%r15 5: 49 c1 ef 03 shr $0x3,%r15 9: 43 80 3c 27 00 cmpb $0x0,(%r15,%r12,1) e: 74 08 je 0x18 10: 48 89 df mov %rbx,%rdi 13: e8 a2 5d 45 ff call 0xff455dba 18: 4c 8b 33 mov (%rbx),%r14 1b: 49 83 e6 fe and $0xfffffffffffffffe,%r14 1f: 49 8d 7e 20 lea 0x20(%r14),%rdi 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) <-- trapping instruction 2f: 74 05 je 0x36 31: e8 84 5d 45 ff call 0xff455dba 36: 49 8b 46 20 mov 0x20(%r14),%rax 3a: 48 89 44 24 18 mov %rax,0x18(%rsp) 3f: 4c rex.WR final repro crashed as (corrupted=false): cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 0 PID: 410 Comm: kworker/0:24 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: usb_hub_wq hub_event RIP: 0010:klist_put lib/klist.c:212 [inline] RIP: 0010:klist_del lib/klist.c:230 [inline] RIP: 0010:klist_remove+0x150/0x300 lib/klist.c:249 Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a2 5d 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 84 5d 45 ff 49 8b 46 20 48 89 44 24 18 4c RSP: 0000:ffffc90002fc7480 EFLAGS: 00010202 RAX: 0000000000000004 RBX: ffff888115eaf448 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8676fae0 RDI: 0000000000000020 RBP: ffffc90002fc7570 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520005f8e80 R12: dffffc0000000000 R13: 1ffff920005f8e94 R14: 0000000000000000 R15: 1ffff11022bd5e89 FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0f8aa08f10 CR3: 0000000117071000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __device_release_driver drivers/base/dd.c:1203 [inline] device_release_driver_internal+0x67e/0x7c0 drivers/base/dd.c:1221 device_release_driver+0x19/0x20 drivers/base/dd.c:1244 usb_driver_release_interface+0x140/0x1b0 drivers/usb/core/driver.c:632 cdc_ncm_unbind+0x2b3/0x440 drivers/net/usb/cdc_ncm.c:1001 cdc_mbim_unbind+0xec/0x100 drivers/net/usb/cdc_mbim.c:205 usbnet_disconnect+0x1a9/0x3a0 drivers/net/usb/usbnet.c:1611 usb_unbind_interface+0x212/0x8a0 drivers/usb/core/driver.c:459 __device_release_driver drivers/base/dd.c:-1 [inline] device_release_driver_internal+0x531/0x7c0 drivers/base/dd.c:1221 device_release_driver+0x19/0x20 drivers/base/dd.c:1244 bus_remove_device+0x2df/0x340 drivers/base/bus.c:535 device_del+0x62e/0xe60 drivers/base/core.c:3453 usb_disable_device+0x3a8/0x750 drivers/usb/core/message.c:1470 usb_disconnect+0x32d/0x870 drivers/usb/core/hub.c:2315 hub_port_connect drivers/usb/core/hub.c:5343 [inline] hub_port_connect_change drivers/usb/core/hub.c:5644 [inline] port_event drivers/usb/core/hub.c:5810 [inline] hub_event+0x19c2/0x4220 drivers/usb/core/hub.c:5892 process_one_work+0x6fd/0xbc0 kernel/workqueue.c:2301 worker_thread+0xa8e/0x13c0 kernel/workqueue.c:2447 kthread+0x324/0x3b0 kernel/kthread.c:313 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 Modules linked in: ---[ end trace 273854350aae34c1 ]--- RIP: 0010:klist_put lib/klist.c:212 [inline] RIP: 0010:klist_del lib/klist.c:230 [inline] RIP: 0010:klist_remove+0x150/0x300 lib/klist.c:249 Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a2 5d 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 84 5d 45 ff 49 8b 46 20 48 89 44 24 18 4c RSP: 0000:ffffc90002fc7480 EFLAGS: 00010202 RAX: 0000000000000004 RBX: ffff888115eaf448 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8676fae0 RDI: 0000000000000020 RBP: ffffc90002fc7570 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520005f8e80 R12: dffffc0000000000 R13: 1ffff920005f8e94 R14: 0000000000000000 R15: 1ffff11022bd5e89 FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000019e4dcc33000 CR3: 00000001294ea000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 28 02 sub %al,(%rdx) 2: 49 89 df mov %rbx,%r15 5: 49 c1 ef 03 shr $0x3,%r15 9: 43 80 3c 27 00 cmpb $0x0,(%r15,%r12,1) e: 74 08 je 0x18 10: 48 89 df mov %rbx,%rdi 13: e8 a2 5d 45 ff call 0xff455dba 18: 4c 8b 33 mov (%rbx),%r14 1b: 49 83 e6 fe and $0xfffffffffffffffe,%r14 1f: 49 8d 7e 20 lea 0x20(%r14),%rdi 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) <-- trapping instruction 2f: 74 05 je 0x36 31: e8 84 5d 45 ff call 0xff455dba 36: 49 8b 46 20 mov 0x20(%r14),%rax 3a: 48 89 44 24 18 mov %rax,0x18(%rsp) 3f: 4c rex.WR