Extracting prog: 1m10.299534827s
Minimizing prog: 26m43.381479821s
Simplifying prog options: 0s
Extracting C: 21.600483273s
Simplifying C: 3m15.533656228s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev-socket$can_bcm-mkdirat-mount-mkdirat-chdir-openat
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00')
openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev-socket$can_bcm-mkdirat-mount-mkdirat-chdir
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00')

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev-socket$can_bcm-mkdirat-mount-mkdirat
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev-socket$can_bcm-mkdirat-mount
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev-socket$can_bcm-mkdirat
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev-socket$can_bcm
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce-writev
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="1437cf9367762859ae6e0f02a49ed975356f4c929e20374e0311b53b099d54bf60324883fd9329eadcb6da44a0858454be135a947c36cf0871296596d0120e22ef2adb989953736270297da09f181c417a164c6962ba5c715a89254c2a5c9b9dc40e6975bbe0fbc4bf62554780cddde60fb9726f25da0b56a00d216057f94f156ade603f5518b45b06ecb852361635581de2fc98b006e7bb5f2966a3c00e4f87d7a32d81b47da894b4a1bca4fc874a70407be480c905b77e6fc1589527e43af59cf57f131c1d7456474e6c7f9daf6e5f489f63678ca936e9253b551961f60db3093b4c38dee742d8ff08ee2c840f186af8296ffe04b53e25eda9a97be5f3e185f914568fceacbee55d2e0c57744f1e71adf20e4a416eea89f13070d13025b9a27159bfed59bbef987d2b3b47de529e19b35e5b9f0e6793c1f0639b3f8d148b13c02a26f414995ebbf408233e5b5467017c2d7337995e6ac9bc1c7d10cbe3081b26ca0f2480332bc3e4c8a3a7c5a6b3bbea6ee50777975c8c3216e329ca0857aaf9ad0d2d446aca29abf04242ee8c74ff2720cfb8ce93f8383e8ee10bdc27f65b2fb14c36c53db9114574c3088fa4758a5fb6d90a7cebfe5f91c985d903191dffbf691bf99737dc00f6c15b956435808f8e68ed5d792896af8c14928d0d7760c5fcc3a780d28fb235167da712de1b3d079c296712f76957dd3dc896b0943b4003f2346bc56533c81907335051176762ba99b9a37e8ba70f72c16f86d029a9eed6ee23acba2dafda65afd8885282552f27e515337aee681c8b70f41ed24567df4c942c91705ba7212d1b2ef4c2b0106b78ad2326d58849f82523b5c3518a68d77b394cc0dbaec1b71938cc1f22aea5583d8b735cad44b7822ed49a04ad451a6614ee33f1e39aa08139430d5b84ae4e5c16be54418a6413733b5310861255fcaf632a02b9680b41f66962bc2e8024f86971717b1baef022ae139b6bc1ee642b413a98c82b94eb78b0bec1e71005a6e0002cb832d940d3a28e7d0e1721b38fb44aeb6eeea842762e839c9c4467c9a443cf7da7f95c5887ba4a115f7c2067212ea215aac9ab1b909ffe0b7ffa6c9337deab817fd7b434ca1db138db5fc97735525dffb019cdc09bfffe57c12def237f98083776528a38646498ffa005f1e9488f083862324e116231401b945f20a3e15dd1d775042a96269acc0fd6c4a9d9b59295648c03b2f581472f5654300c37a1a8da856e47970249994aa949a89d50486848ca964a61b6683450ff5a0fe2e3ffe3341a734ad2ff4a2e62729cde4ce8983a621d40e4495623c2cf6743774fe267bcfe2c919d3a52c7760bb285e0ccfa642c13903b81a09ce11be592dc3e13879518e72ca87ecfa22c4705e2d4a511da0efd8bfadac65f1daa9dcb396d50590f4004b3720b3da776d66e66c22a7d5043f09b9fff2ff32f229540cc90862384b00c97b801cb84d428078efe90d505d370ad54de6beb9ad04c6ca61ea8f936f52dacb5e1eb689d7647e832af8a6b53bbfd9be05d05fb1ed25dc8169aaf7c4818d0048697a462c945467bb90e7ee32b0fb5de2261c40ce1c990caefb3d3432715c141184d2f1d30823e9d90baf0c6db0035e0907fc8a81a02c4b224fefa81d2fa20a5778f2ee0c9c4501e85c0c1f378e2274bdf30c94604bb2ea66c5c7da090a0fdf903b20f4167b9d19f1ce8f21c06c8d94b3f3837795179e9137f90437fa5027ba0bd699e04982ee554634aba2de0eb58a1fb2cd55f9a616a42ad8048f02f29bf286b134a4f1b51c3311dd91f4af463ae0cef67dd75c4a6b3b8ccd7c87e59fe753b590c117b4ba22044445367fb4711e9dc4ed150caf618bfa0b74cc077e50b7951ae81979dc4daa3eefa242cbf1ae985e1f7a14fda10dfed756bcf4ccfd21d5f406b5d04fe57775a181327f92c9db039fea69b416e0de4d5e579c58e7950bf47948aa4e09bc01594ad7b278e330c9e4b139f17fd48ebf11d3e9be77b1eb5ff7fcde9c7f51a335266284b239fff73bb43b0aeb0f1612edb27815fa05420131bc4841cb6a5cd719be1c8737b33424a6956908e673f13f35d3b18ce733d22283e6a8225c4a67e1054c2825e29daeb1df54ae3e88700e9654e9719a463a4ca0fc4eb3bd6159f1f3299ac99a5201c273c18c1f98b89542e9871758600851d9699d7cb6b0b1bf97bb0176e29c37f5da84a5462a14fe948921be7843c2ad72fa50ecfa701c37a7acf99994407a699216688bf1977dca85c5efde18541ba33917d192a2a899569ac8d8186b55bdc2efaca20150dfadf6a8df72e790c9ae4a3ad1cb04ebdd0b6a867c54236ec63e4099a934cc06d9b72f58f7b6b0d823bcb2321c529394b01f48a7f9bbe32d94fee2652cfdab39a5f2aeec314ed901b7cc3faa0e81743bfc9475212baa67456e090dd838030c8fae6e6e1c287970165d17b47be5a580bab6eddbd856f9532facbd3bf3918225e1ffa01ee6dc080d506e78158aaace63d9bc2721667c9adb56d1cd966561dac360fca6c9f5ca4db604018f522c0adc83a11c5ac9acabbe86911916ff2a2245f72220aa342954af4992beeb907fe02abc6f41f0beeede0c1003be786e40410916670a22d99da143004dcf287ef89519048e8848b26f777afc113a31ada7e86e0c83719f172df7133343f8233a4ac53c895506707f1e5d89a4ebe51ee4c9ff52e9a2b0ba207725dde02d7a3b0a581809ec6111b1d0a9353560ffc7c5ff8e33cafae1b42a244658f7aaca8451e3af525ec3af306bd2fed1a8b47a92ea3bc263e985142666488c0209f7b5acfa61e56d33f775c848bc67c839d2bafe1f80a7acbf9a31e4a86db057060b37096b34edeef17a22c09c2f708a013e7fe510b21581e6729ed4972647795a4d536cdbc2e876a3871bb2c81116ccd3fbc29b39429640a161ecaa02cebaebe182482df05ac15cb63c9f448cf4ac1a59fb71c891794f31bf8f5a9dca70bd7532f5819df4a2baf13d47ca247b8ccb90daedc9d8113a416c6695242740ddf5590e8244713293870175dab334235eaee8f89a15e0301904df7a82b36a050508301bf1e8be8281ef2adc4d69cee861cd60cf723097d3dd10b0a40b73eeec379689035db50b6b0f175fd66d938b1ac4fd1e616300784731804153afa34d3714a261b9498e28dd251d9d78c5522f80fcc4e03568bdf3fd941b1a394ac13cf7a1a42e8901f667b051acfa40445a513d50576c4a33a035ebc061eb8a2b20257f7850bf6312e63c14bab09706227f2359c851f1e0afbb6c6aa40aeb7323358a10d449803cfa58da5fa5384bd16c28da85db15b43f013ef559f3fc5382982c4f6363c0a427aa59f9ee2c240d95994b71cf30ed585089c75f346a1485c49e4470ee61471946eeef593a4d351df017b17ee0ed79b3efaf9b6b705cb5ccf8a80b6d785cb35e329b48f180a0093f8bd9c4b418e3e304401fa0612cd2c2e83143579ca8860310611d316916cc7229c52293cc915bbf11751487f6b912e7755c59ef329248cc1051b56b23b291f6ccdab8b613cc45723c06a52e9d0d971460871b761c400822a2c052d2e8fe45bc1506aa5c731d90e6e98f78d9bc573e8567e53208847573a95f1704b7f2199b22b0af296b8bf86e4a0963eda5d077d72eaa2c1a48d57be5da5be9965cb5ce50114ed2f8fb7e36889c7352e7e8686af751e7d60340c13836322bbf661aaa3a47d2fdcda568b86ee3fdd1d2978f6aabf3ae0a70247de2a806ba47a5a3f693221cd0b81cd0410c82052e2b05197a289bc09de68fecb1b43dabc95b4627cd9bb631b96bf997fc986214770d49b453ea7acfe1b8cee6679f24d6591609d1bda513d7c3f0300b77c3196416ddfe3ae542936838d8cee959d49a96b4bda3c995ca8a30146d401f9e02913121b4aa67a5ab4cc761614f8e12bb28c4858e2dff53a11eecc1f0ade0ea6e7e1d68e21500fab6c61f0650207a9948bab419ea47448444cb6e8e6bd588bd235972821ac2278d0f33a9dc86605276a290aad00352e20672f58574977f8e49d9d230c60fc4a79a5a49e96a5a89a425f32fdaa72585595f98ca17f1a23c20547e119fa27c5f5f9c066a9c235d18edcae830bfa360e4c8d394255c9ab42cef47c7aafa089af7510051473cf853eb525a61d0cb956b155de3c9ddd40c6f42b8b7379f5350086c852d279fb2953c0425d7500c32c89eb793ae42069ecd77421a6836c0022eb9afc120f20f286d889e847c6624607d5dcced942f8fc88628f080583ab2145a946d4f250627400d1d055b8d166f448f645ff369265b4606fd3b14323baf1bd8c5adde507083d1d4f333f57d82f4713dd9ff466a11833848db72b4472a9479c59f0edf3b4d57a2e3eab5b4bb4f6c1582e3c03d5b3f912a76b73f166632e812d6e6a8717f041a09e60bb2f59a89d1f4d39662a79098aff60e6104e627338406c426ae5f05a6c74f7fe6d434b4d9f1cafeb9811751b5919d5cd2768479c3568ac9174e8a994b7b5406c6de75c4c3ad7555e2314406dea1687bdb4ce6c080ea7d4ef8530dc65ec12fbbe2629379ff7dc17f1f7e772f677f72a052e16cee3643fa04ab36370e4a45b4994d9bbffd004d8a59c45d9664530eefe08a58ef80fe6b528b826737163fe01dbf0605a23495e68b7f90cc2aeaeb47d0ac06a501e3ef3ad641d918b3ddd3f63d0ec5d3a2a367020831d2976b73645847d214feabb896f70b5f3c14e488fd79bc1107b4cc88e1c159376958a499c58d6c10340a53c74c808dda3d4b75d89806f29bc63551d19f076d9104d5fc229de0dbfa93ecad6408a74ad6f8976d6e56b7b6562eeb9e3ee1e7adf10b6b3293d11555bb556f81580e4c83d5c0d10e16856f7e23bd24ed271a7e268e1bf9450d9ed0fffb7655184f970473752a99dbae50b81bc2f57f72d9f05b9192c441a2968066b2d1e812c7019b8f104dde6f0a7d9a0392cfb940bc552ef5e75af96409db33a6d068c62ce38797fa461541155df7bb800743cbdca34151ca00cda0e05af0e403fc7d01cecce9c3e93693dc15f9527a9ddd1ca03c8c61e011f375096cb6f5d472c3a450d03be9637930b1d1a3c85d828cb5c070997b11ecf774691c19a90418c5ffe501881d074af61bfd94a88daab1059a89258f877a36911fe22a20b4ac23ee0defd6da778d70aad0333ed3266ca67fc5df3e896a205889d514d63ef17ee18ef081c8d322c8c35bbd3cffdaa67feb840940710a2ad0c413df67a5fe3c4da7bfd62552d39b201f2d451d269d784927a8b6fbbe6befa2118be819e7c22a644e56b68cc7eba6b66df72fb8412357596ddfe699a62cc790f3568dc9cee5c0c00f275075464dca8faba9cefe99740d555687ada7373bf1b7350d503856852c2ca923fbe290a2ad243bdf090910aeb6b9b213bfdeef9538bc5795684602534550c1ed3e3ffe1d2ac2a5ea269eab307af13b990c014010dd4c26fdc2f50f78182b6c726d4029501a697d3f82f6d0533fe8f4367505fab3ccb2edd675bcb9cf8368f291b1913e277376a50ce2e90addfe989250fcc3c3897dee9f88dcb2daaa569ac4fe41daddea42011753e91129cac7fee8ad900846956c048a2c83169594747c0d57943d4ac4d1776141ee1ca31bd6c444aa5b9c6aa4b52a278cce59f312c0163a03a34ae85bcff8495c62d0b14530811bf4ace578561a88ae1bf82b2373c7287ec38b3c093774c5ed772c4eaadcfc562f8d5b1daa3364d4fdd237eaf7ee81ac26468323fc5f8b88bba8827ac222237ce4c4e6f162038c9d8fcd71dd4", 0x1000}], 0x2)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun-openat$selinux_enforce
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-write$tun
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro-mmap
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown-ioctl$SIOCSIFHWADDR
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm-shutdown
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
shutdown(r3, 0x0)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs-syz_usb_connect$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write-syz_open_procfs
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-openat
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-mkdir-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mount-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mkdir-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-openat$tun-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-dup-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-socket$inet6_tcp-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-connect$802154_dgram-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-setsockopt$inet6_mreq-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

program did not crash
testing program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=33.116158516s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
simplifying C reproducer
testing compiled C program (duration=33.116158516s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing compiled C program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing compiled C program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing compiled C program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing compiled C program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing compiled C program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
testing program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
validation run: crashed=true
testing program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
validation run: crashed=true
testing program (duration=33.116158516s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-mkdir-mkdir-openat-write
detailed listing:
executing program 0:
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e)

program crashed: KASAN: invalid-free in f_uac2_opts_c_srate_store
validation run: crashed=true
reproducing took 33m33.951662371s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x224/0x2b0 drivers/usb/gadget/function/f_uac2.c:2091
Free of addr ffff88811671f306 by task syz.2.17/383

CPU: 1 UID: 0 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_address_description+0x71/0x210 mm/kasan/report.c:377
 print_report+0x4a/0x70 mm/kasan/report.c:481
 kasan_report_invalid_free+0x11e/0x160 mm/kasan/report.c:556
 check_slab_allocation+0xdf/0xf0 include/linux/page-flags.h:-1
 __kasan_slab_pre_free+0x36/0x50 mm/kasan/common.c:257
 kasan_slab_pre_free include/linux/kasan.h:199 [inline]
 slab_free_hook mm/slub.c:2390 [inline]
 slab_free mm/slub.c:4714 [inline]
 kfree+0xf8/0x440 mm/slub.c:4875
 f_uac2_opts_c_srate_store+0x224/0x2b0 drivers/usb/gadget/function/f_uac2.c:2091
 flush_write_buffer fs/configfs/file.c:207 [inline]
 configfs_write_iter+0x32f/0x490 fs/configfs/file.c:229
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x762/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f342279e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffebe16ab18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f3422a25fa0 RCX: 00007f342279e019
RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000003
RBP: 00007f342283500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3422a25fac R14: 00007f3422a25fa0 R15: 00007f3422a25fa0
 </TASK>

Allocated by task 383:
 kasan_save_stack mm/kasan/common.c:49 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:70
 kasan_save_alloc_info+0x3a/0x50 mm/kasan/generic.c:565
 poison_kmalloc_redzone mm/kasan/common.c:379 [inline]
 __kasan_kmalloc+0x96/0xb0 mm/kasan/common.c:396
 kasan_kmalloc include/linux/kasan.h:261 [inline]
 __do_kmalloc_node mm/slub.c:4395 [inline]
 __kmalloc_node_track_caller_noprof+0x24e/0x4f0 mm/slub.c:4414
 kstrdup+0x4d/0x130 mm/util.c:70
 f_uac2_opts_c_srate_store+0x11e/0x2b0 drivers/usb/gadget/function/f_uac2.c:2091
 flush_write_buffer fs/configfs/file.c:207 [inline]
 configfs_write_iter+0x32f/0x490 fs/configfs/file.c:229
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x762/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e

The buggy address belongs to the object at ffff88811671f300
 which belongs to the cache kmalloc-128 of size 128
The buggy address is located 6 bytes inside of
 111-byte region [ffff88811671f300, ffff88811671f36f)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11671f
flags: 0x4000000000000000(zone=1)
page_type: f5(slab)
raw: 4000000000000000 ffff888100041a00 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 378, tgid 378 (syz-executor), ts 28753925424, free_ts 28732045602
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook+0x37d/0x3b0 mm/page_alloc.c:1863
 prep_new_page+0x2d/0x180 mm/page_alloc.c:1871
 get_page_from_freelist+0x4aea/0x4ba0 mm/page_alloc.c:3948
 __alloc_pages_noprof+0x35a/0x7e0 mm/page_alloc.c:5315
 alloc_slab_page+0x6b/0x1e0 mm/slub.c:-1
 allocate_slab+0x69/0x430 mm/slub.c:2687
 new_slab mm/slub.c:2741 [inline]
 ___slab_alloc+0x591/0x8c0 mm/slub.c:3934
 __slab_alloc mm/slub.c:4025 [inline]
 __slab_alloc_node mm/slub.c:4078 [inline]
 slab_alloc_node mm/slub.c:4239 [inline]
 __kmalloc_cache_noprof+0x2cd/0x470 mm/slub.c:4421
 kmalloc_noprof include/linux/slab.h:881 [inline]
 kzalloc_noprof include/linux/slab.h:1017 [inline]
 inet_alloc_ifa+0x5e/0x1c0 net/ipv4/devinet.c:223
 rtm_to_ifaddr net/ipv4/devinet.c:892 [inline]
 inet_rtm_newaddr+0x2f7/0x17a0 net/ipv4/devinet.c:977
 rtnetlink_rcv_msg+0x8be/0xa40 net/core/rtnetlink.c:6679
 netlink_rcv_skb+0x24a/0x4e0 net/netlink/af_netlink.c:2545
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6697
 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
 netlink_unicast+0x8bf/0xa70 net/netlink/af_netlink.c:1339
 netlink_sendmsg+0x7d1/0xad0 net/netlink/af_netlink.c:1889
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x68d/0x700 net/socket.c:2216
page last free pid 378 tgid 378 stack trace:
 reset_page_owner include/linux/page_owner.h:28 [inline]
 free_pages_prepare mm/page_alloc.c:1390 [inline]
 free_unref_page+0xbb8/0xf70 mm/page_alloc.c:2876
 __free_pages+0x6b/0x3b0 mm/page_alloc.c:5402
 __free_slab+0xb2/0x110 mm/slub.c:2758
 free_slab+0x18/0xe0 mm/slub.c:2781
 discard_slab mm/slub.c:2787 [inline]
 __put_partials+0x115/0x150 mm/slub.c:3256
 put_cpu_partial+0x91/0xc0 mm/slub.c:3331
 __slab_free+0x1cf/0x2a0 mm/slub.c:4584
 do_slab_free mm/slub.c:4666 [inline]
 ___cache_free+0xc9/0xe0 mm/slub.c:4781
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0xb5/0x130 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x14f/0x180 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x28/0x90 mm/kasan/common.c:331
 kasan_slab_alloc include/linux/kasan.h:251 [inline]
 slab_post_alloc_hook mm/slub.c:4202 [inline]
 slab_alloc_node mm/slub.c:4251 [inline]
 kmem_cache_alloc_node_noprof+0x1ca/0x420 mm/slub.c:4305
 __alloc_skb+0x10c/0x360 net/core/skbuff.c:677
 alloc_skb include/linux/skbuff.h:1363 [inline]
 nlmsg_new include/net/netlink.h:1015 [inline]
 netlink_ack+0x155/0xa50 net/netlink/af_netlink.c:2482
 netlink_rcv_skb+0x2cb/0x4e0 net/netlink/af_netlink.c:2551
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6697

Memory state around the buggy address:
 ffff88811671f200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88811671f280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88811671f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 07 fc fc
                   ^
 ffff88811671f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88811671f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x224/0x2b0 drivers/usb/gadget/function/f_uac2.c:2091
Free of addr ffff88811671f306 by task syz.2.17/383

CPU: 1 UID: 0 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_address_description+0x71/0x210 mm/kasan/report.c:377
 print_report+0x4a/0x70 mm/kasan/report.c:481
 kasan_report_invalid_free+0x11e/0x160 mm/kasan/report.c:556
 check_slab_allocation+0xdf/0xf0 include/linux/page-flags.h:-1
 __kasan_slab_pre_free+0x36/0x50 mm/kasan/common.c:257
 kasan_slab_pre_free include/linux/kasan.h:199 [inline]
 slab_free_hook mm/slub.c:2390 [inline]
 slab_free mm/slub.c:4714 [inline]
 kfree+0xf8/0x440 mm/slub.c:4875
 f_uac2_opts_c_srate_store+0x224/0x2b0 drivers/usb/gadget/function/f_uac2.c:2091
 flush_write_buffer fs/configfs/file.c:207 [inline]
 configfs_write_iter+0x32f/0x490 fs/configfs/file.c:229
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x762/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f342279e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffebe16ab18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f3422a25fa0 RCX: 00007f342279e019
RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000003
RBP: 00007f342283500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3422a25fac R14: 00007f3422a25fa0 R15: 00007f3422a25fa0
 </TASK>

Allocated by task 383:
 kasan_save_stack mm/kasan/common.c:49 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:70
 kasan_save_alloc_info+0x3a/0x50 mm/kasan/generic.c:565
 poison_kmalloc_redzone mm/kasan/common.c:379 [inline]
 __kasan_kmalloc+0x96/0xb0 mm/kasan/common.c:396
 kasan_kmalloc include/linux/kasan.h:261 [inline]
 __do_kmalloc_node mm/slub.c:4395 [inline]
 __kmalloc_node_track_caller_noprof+0x24e/0x4f0 mm/slub.c:4414
 kstrdup+0x4d/0x130 mm/util.c:70
 f_uac2_opts_c_srate_store+0x11e/0x2b0 drivers/usb/gadget/function/f_uac2.c:2091
 flush_write_buffer fs/configfs/file.c:207 [inline]
 configfs_write_iter+0x32f/0x490 fs/configfs/file.c:229
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x762/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e

The buggy address belongs to the object at ffff88811671f300
 which belongs to the cache kmalloc-128 of size 128
The buggy address is located 6 bytes inside of
 111-byte region [ffff88811671f300, ffff88811671f36f)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11671f
flags: 0x4000000000000000(zone=1)
page_type: f5(slab)
raw: 4000000000000000 ffff888100041a00 dead000000000122 0000000000000000
raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 378, tgid 378 (syz-executor), ts 28753925424, free_ts 28732045602
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook+0x37d/0x3b0 mm/page_alloc.c:1863
 prep_new_page+0x2d/0x180 mm/page_alloc.c:1871
 get_page_from_freelist+0x4aea/0x4ba0 mm/page_alloc.c:3948
 __alloc_pages_noprof+0x35a/0x7e0 mm/page_alloc.c:5315
 alloc_slab_page+0x6b/0x1e0 mm/slub.c:-1
 allocate_slab+0x69/0x430 mm/slub.c:2687
 new_slab mm/slub.c:2741 [inline]
 ___slab_alloc+0x591/0x8c0 mm/slub.c:3934
 __slab_alloc mm/slub.c:4025 [inline]
 __slab_alloc_node mm/slub.c:4078 [inline]
 slab_alloc_node mm/slub.c:4239 [inline]
 __kmalloc_cache_noprof+0x2cd/0x470 mm/slub.c:4421
 kmalloc_noprof include/linux/slab.h:881 [inline]
 kzalloc_noprof include/linux/slab.h:1017 [inline]
 inet_alloc_ifa+0x5e/0x1c0 net/ipv4/devinet.c:223
 rtm_to_ifaddr net/ipv4/devinet.c:892 [inline]
 inet_rtm_newaddr+0x2f7/0x17a0 net/ipv4/devinet.c:977
 rtnetlink_rcv_msg+0x8be/0xa40 net/core/rtnetlink.c:6679
 netlink_rcv_skb+0x24a/0x4e0 net/netlink/af_netlink.c:2545
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6697
 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
 netlink_unicast+0x8bf/0xa70 net/netlink/af_netlink.c:1339
 netlink_sendmsg+0x7d1/0xad0 net/netlink/af_netlink.c:1889
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x68d/0x700 net/socket.c:2216
page last free pid 378 tgid 378 stack trace:
 reset_page_owner include/linux/page_owner.h:28 [inline]
 free_pages_prepare mm/page_alloc.c:1390 [inline]
 free_unref_page+0xbb8/0xf70 mm/page_alloc.c:2876
 __free_pages+0x6b/0x3b0 mm/page_alloc.c:5402
 __free_slab+0xb2/0x110 mm/slub.c:2758
 free_slab+0x18/0xe0 mm/slub.c:2781
 discard_slab mm/slub.c:2787 [inline]
 __put_partials+0x115/0x150 mm/slub.c:3256
 put_cpu_partial+0x91/0xc0 mm/slub.c:3331
 __slab_free+0x1cf/0x2a0 mm/slub.c:4584
 do_slab_free mm/slub.c:4666 [inline]
 ___cache_free+0xc9/0xe0 mm/slub.c:4781
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0xb5/0x130 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x14f/0x180 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x28/0x90 mm/kasan/common.c:331
 kasan_slab_alloc include/linux/kasan.h:251 [inline]
 slab_post_alloc_hook mm/slub.c:4202 [inline]
 slab_alloc_node mm/slub.c:4251 [inline]
 kmem_cache_alloc_node_noprof+0x1ca/0x420 mm/slub.c:4305
 __alloc_skb+0x10c/0x360 net/core/skbuff.c:677
 alloc_skb include/linux/skbuff.h:1363 [inline]
 nlmsg_new include/net/netlink.h:1015 [inline]
 netlink_ack+0x155/0xa50 net/netlink/af_netlink.c:2482
 netlink_rcv_skb+0x2cb/0x4e0 net/netlink/af_netlink.c:2551
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6697

Memory state around the buggy address:
 ffff88811671f200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88811671f280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88811671f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 07 fc fc
                   ^
 ffff88811671f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88811671f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================