Extracting prog: 46m24.170285099s Minimizing prog: 54m31.416723471s Simplifying prog options: 0s Extracting C: 37.57638608s Simplifying C: 12m55.185591586s extracting reproducer from 66 programs testing a last program of every proc single: executing 16 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm detailed listing: executing program 0: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x3}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0xa005, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-ioctl$HIDIOCGUSAGES-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_usb_control_io$uac2-syz_open_dev$char_usb-syz_usb_control_io$lan78xx detailed listing: executing program 0: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000062a10b40450c101003000102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000840)='3', 0x1) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000200)={{0x1, 0x200, 0x400, 0x800, 0xfffffff9, 0x4}, 0xa7, [0x5, 0x8, 0x0, 0x9, 0x3, 0x10001, 0x4b, 0x6, 0x401, 0x7, 0xa64, 0x5a, 0x135, 0x40, 0x1c83, 0x400, 0x0, 0xfe5, 0x8000, 0x0, 0x2c, 0xa, 0xfffffffe, 0xfffff2eb, 0x6, 0x1, 0x1, 0x5, 0x7, 0x7ff, 0x3, 0x0, 0x6, 0x5, 0x1, 0x4, 0x5, 0x8000, 0x1, 0x2, 0x1, 0x9fb6, 0x1, 0x6, 0x7, 0x2, 0x5, 0x1, 0x3, 0x5eb, 0x5, 0x0, 0x0, 0xfff, 0x3815, 0x7, 0x45, 0xfeb4, 0x3, 0x2, 0x0, 0x8, 0x7, 0x7d8, 0x6, 0x7620, 0x2, 0x7, 0x3, 0x5, 0x80000001, 0x3, 0x9, 0xee8, 0xf17, 0x3, 0x7, 0x81, 0x3, 0x0, 0xff, 0x2, 0x7f, 0xffff, 0x7, 0x401, 0xffff, 0x5, 0x6, 0x1000, 0x7fffffff, 0xf, 0x7, 0x7, 0x0, 0x8a, 0x8, 0x6599ae0, 0x0, 0x100, 0x7, 0x7, 0x3, 0x3, 0x7fff, 0x5, 0x3, 0xe, 0x3, 0xfffffffb, 0x1ff, 0x5, 0x8, 0xffffa352, 0x0, 0x0, 0xe6ea756, 0x0, 0xf90, 0x6, 0x2, 0x6120, 0x3, 0x40, 0x4, 0x1, 0x1, 0x6, 0x3, 0x3, 0x7, 0xffff, 0x8001, 0xfffffffc, 0x6a2c, 0x0, 0x9, 0x7, 0x2, 0xa6, 0x3, 0x1, 0x9, 0x4, 0x9, 0x5, 0xfffffffe, 0x2, 0x2, 0x6, 0x7, 0xffffff2a, 0x10000, 0x9, 0x25cfd110, 0x8001, 0x6, 0xe, 0x9, 0x9, 0x8001, 0x5, 0x9, 0x8000, 0x8, 0xfffeffff, 0x7, 0x7, 0x401, 0x2, 0x4, 0x5, 0x0, 0x5, 0x800, 0x4, 0xfffff37d, 0xa8b, 0x9, 0xf3c, 0x10001, 0x4f475145, 0x6, 0x400, 0x9, 0x2, 0xf, 0xfffffff8, 0x8, 0x9, 0xfffff1ca, 0x8, 0x3ff, 0x4, 0xffffffff, 0x2, 0x9, 0x80, 0x7, 0x1ff, 0x0, 0x2, 0x7, 0x9, 0x100, 0x6, 0x8, 0x0, 0x5, 0x7fff, 0x0, 0x9, 0x0, 0x101, 0xae, 0x80, 0x8, 0x0, 0x7, 0x1064, 0x8, 0x5, 0x2, 0x40, 0x1, 0x7, 0x10000, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x9, 0xb, 0xe6, 0x6, 0xb2b, 0x1, 0xfb, 0x8001, 0x8, 0x4, 0x15280000, 0x4, 0x5, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x1, 0xfffffffb, 0x91fc, 0x5, 0xf78, 0x7, 0x5, 0x8000, 0x2, 0x6, 0x80000000, 0x1000, 0xadda, 0x8, 0x9, 0x8, 0x0, 0x6, 0x1, 0x4, 0x2, 0x9, 0x400, 0x8, 0xfffffffc, 0x2, 0x7ff, 0x7fff, 0x7ff, 0x5, 0x6, 0x0, 0x3, 0x7b8, 0x6, 0x6, 0x78e, 0x1, 0xb, 0x9, 0x0, 0xfffffff7, 0x0, 0x7, 0xb, 0x800, 0x6, 0xffff7fff, 0x401, 0x5, 0x71389031, 0x7, 0xc, 0xc, 0x0, 0xda, 0x2, 0xe, 0x5, 0x9, 0x10000, 0xb, 0x39, 0x9, 0x3, 0x2, 0x8001, 0x9, 0x9, 0xffffffff, 0x8, 0x9, 0xe2, 0x80000001, 0xb36, 0x4a24, 0xf, 0x5d, 0xb, 0x8, 0x1, 0x7, 0xff, 0x1, 0x8, 0x2, 0x2, 0xff, 0x9, 0xc194, 0x2, 0x81, 0x5, 0x1, 0x26df1695, 0x7, 0x6, 0x1ff, 0x1, 0x1, 0x5, 0x6, 0x2, 0x0, 0x1624, 0x9, 0x0, 0x1, 0x4, 0xd6, 0x200, 0xa, 0x4, 0x7f, 0x0, 0xbf, 0x2, 0x401, 0x4, 0x5, 0x80000001, 0x4, 0xd16, 0x4, 0x5, 0x5, 0x5, 0x80000000, 0x2, 0x3ff, 0x1, 0x8000, 0x8, 0x3, 0xdca1, 0x7, 0x8, 0x8, 0x4bac, 0x3, 0xee, 0x1ffe000, 0x7f, 0x9, 0x58, 0x101, 0x4, 0x3, 0x4, 0x6, 0x200, 0x0, 0xfffffff8, 0x7, 0x1ff, 0xe, 0x15bc, 0x80d, 0x3, 0x2, 0x5, 0x4, 0x80000000, 0x9, 0x80, 0x4f0f, 0x71, 0x9, 0x3ad5, 0x5, 0x0, 0x8, 0x0, 0x1, 0x3, 0x7, 0xb7f, 0x8, 0x6, 0x7, 0xa454, 0x10000, 0x2, 0x9, 0x4, 0x9, 0xc524, 0x3c, 0x5, 0x6, 0x9397, 0x6, 0x101, 0x800, 0x54, 0x1, 0x7, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x5, 0x9, 0x5, 0x0, 0xd3ef, 0xd, 0xfffffffd, 0x7, 0x4, 0x4, 0x3, 0xb, 0x5, 0x3, 0x0, 0xe0, 0xfffffffe, 0x6, 0x1000, 0xffffff1d, 0x4, 0x9, 0x3, 0x10, 0xcbb, 0x200, 0x8, 0x4, 0xb, 0x7, 0xd1, 0x21e456d6, 0x401, 0xd, 0x9, 0x10000, 0x9, 0xa3e8, 0xe6f, 0x6, 0xc02, 0xe, 0x4, 0x2, 0x10, 0x1, 0x80000001, 0x4, 0x100, 0x7ff, 0x3, 0x7bd7, 0x4, 0x10, 0xf77c, 0x80000001, 0xe, 0x400, 0x3, 0x101, 0x8, 0x0, 0x10000, 0x5, 0x4, 0x3ff, 0x2, 0xc986, 0x6, 0xfc8c, 0x8c, 0x8000, 0x4f19, 0x0, 0xffff, 0x401, 0x0, 0x7, 0x1, 0x52, 0x3a81, 0xe, 0x3, 0x9, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8, 0x5, 0x81, 0x9, 0x7, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x6, 0x7, 0x5, 0x3, 0x2, 0x7fffffff, 0x3, 0x401, 0xc5, 0x7, 0xe, 0x3, 0xff, 0x9, 0x5f08, 0x2, 0x8, 0x2, 0x4, 0x6, 0x976, 0x7ff, 0x0, 0x8, 0x8, 0x0, 0xbe6, 0x9, 0xbf68, 0x3ff, 0x3, 0x1, 0x3, 0xfff, 0x1, 0x669f1a78, 0x5, 0x3, 0x0, 0x1000, 0x84d, 0x3, 0xfff, 0x7, 0x3de, 0x4, 0x7fffffff, 0x5, 0x3, 0x8, 0x2830589f, 0x6, 0x0, 0x51d, 0x8, 0x7fff, 0xdf9, 0x6, 0x7fffffff, 0x80000000, 0x0, 0x7ff, 0x2, 0x1, 0x1, 0x639000, 0x121d, 0xe9, 0x7fff, 0x7fff, 0xf, 0xffff, 0x9, 0x2, 0x8, 0x6, 0xb, 0x9, 0x3, 0x5, 0x1000, 0x7, 0x0, 0x9f49, 0x8, 0x7fff, 0x2, 0x7b, 0xa60, 0x3cda, 0x4, 0x8, 0xc, 0x2, 0x9, 0xe, 0x5, 0xc, 0x7, 0x2a2, 0x7, 0x101, 0x6000000, 0x1, 0x0, 0xfff, 0x0, 0x400, 0xc5b1, 0x79, 0x1, 0x2, 0x3, 0x2, 0x6, 0x18, 0x3, 0x5, 0x101, 0x5, 0x27e, 0x9, 0x0, 0x25dc, 0x7, 0x154a8000, 0x10000, 0x80000000, 0x4, 0x1, 0x7, 0xff, 0x4, 0x0, 0x1, 0x101, 0x7, 0xd, 0x2, 0x0, 0x7fffffff, 0x2, 0x6, 0x6, 0x48000, 0x2, 0x0, 0x5, 0x5, 0x5, 0x4, 0x1, 0x80, 0x405, 0x7ff, 0x9, 0x7, 0x3, 0x4, 0xba, 0x4, 0xa, 0x5182, 0x6aef, 0x1, 0x9, 0x3, 0x80, 0xe, 0x6, 0x100, 0x42c, 0x2f8, 0x1, 0x7, 0x2, 0x498c, 0x8, 0xd63d, 0x3, 0x3ff, 0x9, 0x4, 0x3, 0xffffffff, 0x9, 0xffff, 0x4, 0x0, 0x1, 0x6, 0x6, 0x5, 0x4, 0x7, 0x1000, 0x1, 0x8001, 0x5, 0x7, 0xf, 0x7, 0x7fffffff, 0x4, 0x55, 0xb4, 0x1, 0x2, 0xffff, 0xb, 0x80000001, 0x3ff, 0x1000, 0x7, 0x54, 0x5, 0x7, 0x2, 0x2d6, 0xca4, 0x5, 0x3, 0x5, 0x3, 0x10001, 0xd646, 0x3, 0xffffffff, 0x65, 0x2, 0x70000000, 0x67c, 0x3, 0x3, 0xfffffff7, 0x8001, 0x80000000, 0xeb, 0x800, 0x81, 0x7, 0x2, 0xa55, 0xe, 0x6, 0xd0000, 0xfffffffe, 0xedd, 0xffff, 0x7, 0x40, 0x2, 0x4, 0x7fffffff, 0x9, 0x4, 0xc, 0xc356, 0x8, 0x9, 0xfffffff8, 0xafe, 0x2, 0x7, 0x7ff, 0xa5, 0x4, 0x7ff, 0x6, 0x6, 0x6, 0x1, 0x101, 0x1, 0xfffffffa, 0x7, 0x9, 0x5, 0xd, 0x29a2, 0xc5, 0x5, 0x3, 0x8, 0x28, 0xa3a9, 0x4, 0x400, 0x873, 0x3, 0xfffffffe, 0x1, 0x2, 0x7, 0x2, 0x0, 0xffffffff, 0x81, 0xfffffff9, 0x4, 0x7, 0x6, 0x4, 0x2, 0x10, 0x0, 0x9, 0xf67, 0x6, 0x9, 0x0, 0xffffffff, 0x7, 0x4, 0x3, 0x1cb, 0xffffa34d, 0x8, 0x4, 0x4b00, 0x478, 0x2cd1, 0x4, 0x1000, 0xf, 0x7d12, 0x5, 0x9615, 0x7, 0x1, 0x4, 0x0, 0x3ff, 0x6, 0x3, 0x7ff, 0x7fff, 0x25, 0x3, 0x200, 0xf, 0x3ff, 0x10000, 0x0, 0x5, 0x8, 0x1000, 0x5, 0x5, 0x29, 0x1, 0x5, 0x7, 0x5, 0x0, 0x1, 0x9, 0x3, 0xffffff55, 0x3, 0xf, 0x5, 0x300, 0x5, 0x8, 0x9, 0x6, 0x7, 0x3, 0x6db9, 0x4, 0x7685, 0xfffffff9, 0x4, 0x5, 0xfff, 0xe, 0x3, 0x2, 0xfff, 0x7ff, 0x206, 0x5, 0x6b1f, 0x3, 0x8, 0x8001, 0x9, 0xb, 0x5, 0x5, 0x2, 0x857, 0x2, 0x6, 0x800000, 0x0, 0xfffffffa, 0x2, 0x8, 0x7, 0x9, 0x3, 0x9, 0x7, 0xa, 0x3, 0xef, 0x0, 0x2e, 0x1ff, 0x4, 0x3, 0x5, 0x200, 0xae1, 0x8, 0x3, 0x4, 0x9, 0x6, 0x5102, 0xbd, 0x100, 0xfffff000, 0xd645, 0xb, 0x400, 0x3, 0x0, 0xe, 0xfffff800, 0x40, 0x76, 0x0, 0xb811, 0x1, 0x1, 0x80, 0x8, 0x29ce7b65, 0xe111c07, 0x3, 0x7, 0x1, 0x6, 0xccc1, 0x9, 0x4, 0x9, 0x401, 0x8, 0x4, 0x6, 0x100, 0x2, 0x1ff, 0x8, 0x7, 0x9, 0x1, 0x5, 0x80000001, 0x5, 0x5, 0x84000000, 0x5, 0x5, 0x3, 0x6, 0x2, 0x3, 0x3]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000640)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x43, &(0x7f00000004c0)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000001340)=ANY=[@ANYBLOB="400f000000001fb72a9be24369a6d5f9bcd7131df8dbe43c08c95a50df63cf585e698ac9b907f24324b565c513a8e3d9d72839195fe429e4f50e94c3819f8789f679f63507261171765b70e279b44cd8299efad663e0c3e582a129fc409faca5a0ef4f81bd62ffc69143c7c780fea4a0dcbbed0f320ff1224922ee985c9cddb1b6ce3225b78b137024828b5ab38f0b3f0e87"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hidraw-syz_usb_control_io$lan78xx-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io$uac1-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io$lan78xx detailed listing: executing program 0: r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0xc, {0xc, 0x21, "74a73178a5d7be108a90"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r2, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x21, 0xcc, {0xcc, 0x21, "ee7dba6a855c521115b53f80592c5dfa6a31c54b9dd533559c06cc4d4623f7867d328bc97c5c8dc6f869e14c6894bd7bf5bf384af72b52ee05e9f2e11214161d741bf704aa70d5ea0e0516403f569220770d9a876d9009c9ab9a042b3a75dd78a5d4a5fb8ab8415263d0a15ba1eed87c0644ccac8d8fcd4332afbad5357261cdb19ec541ae7ead555a9d5d869919def614adff7c1f544333e02febdd5e8502e4dbfa80c838fdb1ae40a3b253362e667e9c291e29ad725912a24682de066f2b3faea9d1f5829ca964f0c5"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f00000008c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "3a9719f53b8d75a99f69870a843fead6"}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x8, 0x2, 0x8, "34dead56", 'pkz6'}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x4, 0xf7, 0x4, 0x5, 0xfff4}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x20, 0x12, 0xad, "00e7a3cd1a5b53b5320059e6a81a92ce4e2805a6082592b3d8b3c0cffa987ef13665f03fc40c38bdd9b3a93a7bcd423be4a451f68f6b6a8756724563376d7805746117eca34816c437224b205148e534283228ebf81e4d94332a2d6a553cff58ef630426654bc09276ea8a35a8ee23103df921d45295ee84cdf216178ec7a638558b23ef9eae039dbad553c4937dad0e8b0055a469bafb65f0cf8378ef67200f864022ea44d3a6361af28ccad1"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x9eca}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "fdbf"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @random="5c13417e4714"}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a46b"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x15}, 0x0, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000e00)={0x40, 0x21, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000f40)={0x14, &(0x7f0000000640)={0x20, 0x24, 0x48, {0x48, 0xc, "848259e7c7151c6aaf4483d60cc2f057d724ee3f411625283512335afa4b45a743e3fcc8bd691e383280957b56ea0fda11c0ecb8519b3f96243ad42999edb69ff6794e1fa6c5"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001140)={0x34, &(0x7f0000000f80)={0x20, 0x30, 0x44, "1f7058b1f469aa697912462920d576013aed7c54d0e9c1f2fa794ed3bcb5afee4b458adb875102df1eb723882aeb6a53c6f7a4a204c4d72b62da9c159f034d3a22f6fb47"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001080)={0xc0, 0xa1, 0x4, 0xb9}, &(0x7f00000010c0)={0x40, 0xa0, 0x4, 0x1f5}, &(0x7f0000001100)={0xc0, 0xa2, 0x2f, "60aaf23e67476f0c7e2c2944f1db0dce7973b80bdf93c51760ebc8c475051e819398a19da268b8a04e08e5e6f23c1f"}}) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000080)="0220") syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x150d67b335ed1332, 0x4b3, 0x3109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x93, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xce6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfe, 0x9, 0xc}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5e, 0x1, 0x76, 0x10, 0x4}, 0x3e, &(0x7f00000005c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x78, "ec51d279949d4e25498e61b1bd9d17a9"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x8, 0xe7f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "07f7a3309fec3c13ef8993099baf2e43"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x9, 0x5, 0xc7af}]}, 0x2, [{0x28, &(0x7f0000000600)=@string={0x28, 0x3, "4a17a9937ddc1e982b5ff2c0c61e467f885385ac7f14fa9ea2d155492530509dc11557964701"}}, {0x77, &(0x7f0000000700)=@string={0x77, 0x3, "741ef0769a6dbc94f464694d24f3e41f5cbd710185e4730c63f9b1f0372a3085912964ba11296f6e33d914ffa17496dd60a04308a1bffac946af86c9648bab8b0a5144c5fd819bed3d02f92c46fa2fd01181884e0662e90a278bf8a104f6235ae66b1d94316d90e4d53aef543c173483de41f6cc49"}}]}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xb, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x0, 0x22, 0xbf, {0xbf, 0x22, "07d9537b4a07d3ba4f256bd8b4fde8dc7e8a1f43c6dd7e7549850b4113b34ed4ae098c41b68f4391e52f0e5f5c2f4e1ff3d42a80c037da518713dac51b8778e4cfd8a122ecbabab41f6519bf4c2924386c9e389b68c7ae540286f742b045d6f3cc95d2a9a21b53bd47f4ccb330c48928c22a375fdeb4c1f2035b6980890e656a56599d541f1834009b53adfdbae03aaa2ef1c9e4b8e00f06db6e7f5264329f9c57794b13f37cef6ca1e822a54fe2227af57895d6260a27cde857422cd3"}}, &(0x7f0000000200)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "dc179d8f05a1d901fe972d3fd31ee57bc797a4f131b95a784ea84a833abd2f2886c375dd4e97645389a9757d9ff383182080f3d4740f1c04c094e416b8727098521fabb0cf8bc2c6f7074a0675c72434309097d2d51070d7ddfd2a4fb85f9ba04fc43c293d9a6ba0bf488ef1bb46b78b2b6a9b5bfea7d78568faf540cd4caa051f815fae65189c85f8a70bc5ce475fb2e0a4b8c116fe912a4244e859f3a7a3ce1647d0293e46a4d1ff878dcead3526b71fdfa47b6aa2e7009e1a9ab9e54c4aeddb8e31d77bc1a3e3d1ca5994c5c4ad035cd3a6fd9d37fde97a665b7d12e5e7dc4ebe"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x40, 0x9, 0x9, "a78280c7adf3e13a44"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "36d0cef372155303647b3dab9931b5b585f04b85be6f6b370d7cfaf35caa875bab08aa5a36cfb608e4fd4730472075"}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-syz_open_procfs-read$eventfd-unshare-openat$cuse-getgid-fstat-mount$fuse-socket$inet6-openat$cgroup_ro-socket$nl_generic-syz_genetlink_get_family_id$nl80211-readv-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_GET_SCAN-syz_genetlink_get_family_id$l2tp-sendmsg$L2TP_CMD_SESSION_GET-getsockopt detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) unshare(0x20000400) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getgid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xb82}}], [{@uid_eq={'uid', 0x3d, r4}}]}}) socket$inet6(0xa, 0x80003, 0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2102040c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4}]}, 0x2c}}, 0x0) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-syz_open_procfs-read$eventfd-unshare-openat$cuse-getgid-fstat-mount$fuse-socket$inet6-openat$cgroup_ro-socket$nl_generic-syz_genetlink_get_family_id$nl80211-readv-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_GET_SCAN-syz_genetlink_get_family_id$l2tp-sendmsg$L2TP_CMD_SESSION_GET-getsockopt detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) unshare(0x20000400) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getgid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xb82}}], [{@uid_eq={'uid', 0x3d, r4}}]}}) socket$inet6(0xa, 0x80003, 0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2102040c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4}]}, 0x2c}}, 0x0) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket-connect$inet6-sendmmsg$inet6-syz_usb_control_io$cdc_ncm-fsopen-syz_usb_connect$rtl8150-fsconfig$FSCONFIG_SET_STRING-socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-sendmsg$nl_route_sched-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-syz_usb_control_io$hid-syz_usb_connect$hid-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$sock_linger-close-syz_clone-ptrace-syz_clone3-socket$inet6_tcp detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) r2 = socket(0x3, 0x80000, 0x100) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da933b3efe8000000000000084d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x808, [{{0x9, 0x2, 0xfffffcf9}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a000100250007001d0000bec9a4269e40e8ecd4daa45cb12963b0265dff35a83bb93210f0a4c38bea4749967310fcc42c40502b92afb0955178f1e8a21d106130663e5cda63e23b2d6763d8a05bcc1750f7"], 0x1c}}, 0x20002000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000540)={0x1, 0x9}, 0x8) (async) close(0x3) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r8) (async) syz_clone3(&(0x7f0000000900)={0x100801000, 0x0, &(0x7f0000000600), &(0x7f0000000640), {0x2f}, &(0x7f00000007c0)=""/150, 0x96, &(0x7f0000000580)=""/65, &(0x7f0000000500)=[r8], 0x1, {r5}}, 0x58) (async) socket$inet6_tcp(0xa, 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-socket-connect$inet6-sendmmsg$inet6-syz_usb_control_io$cdc_ncm-fsopen-syz_usb_connect$rtl8150-fsconfig$FSCONFIG_SET_STRING-socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-sendmsg$nl_route_sched-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-syz_usb_control_io$hid-syz_usb_connect$hid-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$sock_linger-close-syz_clone-ptrace-syz_clone3-socket$inet6_tcp detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) r2 = socket(0x3, 0x80000, 0x100) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da933b3efe8000000000000084d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x808, [{{0x9, 0x2, 0xfffffcf9}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a000100250007001d0000bec9a4269e40e8ecd4daa45cb12963b0265dff35a83bb93210f0a4c38bea4749967310fcc42c40502b92afb0955178f1e8a21d106130663e5cda63e23b2d6763d8a05bcc1750f7"], 0x1c}}, 0x20002000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000540)={0x1, 0x9}, 0x8) (async) close(0x3) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r8) (async) syz_clone3(&(0x7f0000000900)={0x100801000, 0x0, &(0x7f0000000600), &(0x7f0000000640), {0x2f}, &(0x7f00000007c0)=""/150, 0x96, &(0x7f0000000580)=""/65, &(0x7f0000000500)=[r8], 0x1, {r5}}, 0x58) (async) socket$inet6_tcp(0xa, 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$swradio-ioctl$VIDIOC_ENUM_FMT-openat$cgroup_ro-write$binfmt_misc-sendmsg$NL80211_CMD_GET_WIPHY-syz_ublk_setup_io_uring-io_uring_register$IORING_REGISTER_SEND_MSG_RING-syz_ublk_add_dev-dup-ioctl$VIDIOC_G_CTRL-syz_ublk_setup_queues-sendmsg$nl_xfrm-syz_emit_ethernet-openat$kvm-fsopen-openat$ppp-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMAXCID-syz_open_dev$dvb_frontend-ioctl$FE_SET_FRONTEND-close_range-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_VAPIC_ADDR-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0xb, 0x1, "ae8815b85b08b9e1093366dc41e523de997347ff2468e2d38dce9f848654c1c8", 0x31303553}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x80c1) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000680)={0x28, 0x2, 0x0, r1, &(0x7f0000000440)="a4a9db6a2635b50015e7554b8a4362669eab3447bf5f80e7ae9b1a4f6920e68ec2eed34d2c9a7b8c5c9dd2", 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x4}}, 0x1) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000002c0)={0x4, 0xe}) (async) syz_ublk_setup_queues(r1, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x259}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10010004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79c3, 0x1, 0xfffffffe, 0x20000ad, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f43, 0x100, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000200000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000ffffffff00000080560000000000000000000000fcffffff00000000000000000000000010000000090000000800000000000000000000000a001e000e0000000000000048"], 0x138}}, 0x40000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r11, 0x40047451, &(0x7f0000000200)=0x8) (async) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r12, 0x40246f4c, &(0x7f0000000280)={0x30a32c0, 0x1, @qpsk={0xfffffffa, 0x20}}) (async) close_range(r10, 0xffffffffffffffff, 0x0) r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r14, 0x4008ae93, &(0x7f0000000040)=0x1000) (async) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r14, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$swradio-ioctl$VIDIOC_ENUM_FMT-openat$cgroup_ro-write$binfmt_misc-sendmsg$NL80211_CMD_GET_WIPHY-syz_ublk_setup_io_uring-io_uring_register$IORING_REGISTER_SEND_MSG_RING-syz_ublk_add_dev-dup-ioctl$VIDIOC_G_CTRL-syz_ublk_setup_queues-sendmsg$nl_xfrm-syz_emit_ethernet-openat$kvm-fsopen-openat$ppp-ioctl$PPPIOCNEWUNIT-ioctl$PPPIOCSMAXCID-syz_open_dev$dvb_frontend-ioctl$FE_SET_FRONTEND-close_range-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_VAPIC_ADDR-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0xb, 0x1, "ae8815b85b08b9e1093366dc41e523de997347ff2468e2d38dce9f848654c1c8", 0x31303553}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x80c1) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000680)={0x28, 0x2, 0x0, r1, &(0x7f0000000440)="a4a9db6a2635b50015e7554b8a4362669eab3447bf5f80e7ae9b1a4f6920e68ec2eed34d2c9a7b8c5c9dd2", 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x4}}, 0x1) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000002c0)={0x4, 0xe}) (async) syz_ublk_setup_queues(r1, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x259}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10010004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79c3, 0x1, 0xfffffffe, 0x20000ad, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f43, 0x100, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000200000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000ffffffff00000080560000000000000000000000fcffffff00000000000000000000000010000000090000000800000000000000000000000a001e000e0000000000000048"], 0x138}}, 0x40000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r11, 0x40047451, &(0x7f0000000200)=0x8) (async) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r12, 0x40246f4c, &(0x7f0000000280)={0x30a32c0, 0x1, @qpsk={0xfffffffa, 0x20}}) (async) close_range(r10, 0xffffffffffffffff, 0x0) r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r14, 0x4008ae93, &(0x7f0000000040)=0x1000) (async) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r14, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-writev-ioctl$TCSETS-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-ioctl$KVM_CREATE_VM-sendmsg$IPCTNL_MSG_CT_DELETE-sendmsg$nl_generic-ioctl$KVM_SET_USER_MEMORY_REGION-socket$kcm-socket$nl_netfilter-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-fsopen-fsconfig$FSCONFIG_SET_STRING-openat$tun-openat$cgroup_ro-syz_usb_connect-syz_open_dev$I2C-socket$nl_route-sendmsg$nl_route_sched-socket$inet6_tcp-bpf$PROG_LOAD-bpf$PROG_LOAD-sendmsg$nl_route-socket$netlink-sendmmsg-close_range detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xffffffff, 0x2, 0x4, 0xffff, 0x11, "00625c353fe47f635e000000000000de006324"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = socket$kcm(0x2, 0x0, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007200000000000000300e1ffdc0000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r3 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-writev-ioctl$TCSETS-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-ioctl$KVM_CREATE_VM-sendmsg$IPCTNL_MSG_CT_DELETE-sendmsg$nl_generic-ioctl$KVM_SET_USER_MEMORY_REGION-socket$kcm-socket$nl_netfilter-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-fsopen-fsconfig$FSCONFIG_SET_STRING-openat$tun-openat$cgroup_ro-syz_usb_connect-syz_open_dev$I2C-socket$nl_route-sendmsg$nl_route_sched-socket$inet6_tcp-bpf$PROG_LOAD-bpf$PROG_LOAD-sendmsg$nl_route-socket$netlink-sendmmsg-close_range detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xffffffff, 0x2, 0x4, 0xffff, 0x11, "00625c353fe47f635e000000000000de006324"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = socket$kcm(0x2, 0x0, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007200000000000000300e1ffdc0000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r3 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-syz_usb_connect$hid-syz_usb_connect$hid-socket$can_j1939-socketpair$unix-sendmsg$IPCTNL_MSG_EXP_NEW-write$uinput_user_dev-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-openat$kvm-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: pipe(&(0x7f0000000440)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-syz_usb_connect$hid-syz_usb_connect$hid-socket$can_j1939-socketpair$unix-sendmsg$IPCTNL_MSG_EXP_NEW-write$uinput_user_dev-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-openat$kvm-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: pipe(&(0x7f0000000440)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): landlock_create_ruleset-landlock_restrict_self-syz_open_procfs$namespace-syz_ublk_setup_queues-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$key-sendmsg$key-sendmsg$key-socket$inet_udp-bind$inet-connect$inet-setsockopt$inet_IP_XFRM_POLICY-sendmmsg-syz_usb_connect-socket$inet6_tcp-dup-syz_ublk_setup_queues-syz_io_uring_setup-syz_io_uring_setup-syz_ublk_setup_queues-io_uring_register$IORING_REGISTER_PERSONALITY-syz_ublk_setup_queues detailed listing: executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x84f9, 0x80000, 0x0, 0x39}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab59, 0x2, 0x2, 0x4c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2b3, 0x1000, 0x1, 0x2be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c41, 0x2, 0x0, 0x17d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e68, 0x8, 0x1, 0x2fa}}], 0x4, &(0x7f0000001500)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x2, 0x48f, 0x0, &(0x7f0000000500)=@buf_1k="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"}}, &(0x7f0000001580)) syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = syz_io_uring_setup(0x7f17, &(0x7f00000015c0)={0x0, 0xcc55, 0x0, 0x3, 0x2bc}, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) r12 = syz_io_uring_setup(0x2e68, &(0x7f0000001780)={0x0, 0xb1eb, 0x800, 0x0, 0x1f9}, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x0, 0x8043, 0x2, 0x0, 0x238}, &(0x7f0000001940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4969, 0x10, 0x2, 0x3ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b3, 0x800, 0x1, 0x33a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17cc, 0x8000, 0x3, 0x1e1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5075, 0x2000, 0x3, 0x284}, 0xffffffffffffffff}], 0x4, &(0x7f0000002bc0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x834, 0x0, &(0x7f0000001bc0)=@buf_1k="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"}}, &(0x7f0000002c40)) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000001700)={0x0, 0xe991, 0x200, 0x1, 0x260, 0x0, r11}, &(0x7f0000002c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22d, 0x40, 0x2, 0x22, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9561, 0x20, 0x3, 0x3da, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bc5, 0x4, 0x0, 0x3c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5bca, 0x200, 0x1, 0x389, 0x0, r13}}], 0x4, &(0x7f0000003f00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7f}, 0x0, r14, '\x00', {0x0, 0xaf8, 0x0, &(0x7f0000002f00)=@buf_512="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"}}, &(0x7f0000003f80)) program did not crash single: failed to extract reproducer bisect: bisecting 66 programs with base timeout 30s testing program (duration=46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 10, 26, 7, 13, 22, 22, 22, 6, 30, 23, 16, 6, 29, 29, 21, 7, 9, 16, 7, 30, 30, 13, 13, 7, 25, 30, 29, 29, 15, 30, 30, 10, 30, 18, 18, 5, 19, 10, 20, 5, 5, 6, 8, 2, 20, 5, 7, 2, 27, 6, 6, 3, 5, 7, 23, 6, 14, 10, 3, 2, 24, 20, 18, 1, 8] detailed listing: executing program 32: r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x84f9, 0x80000, 0x0, 0x39}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab59, 0x2, 0x2, 0x4c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2b3, 0x1000, 0x1, 0x2be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c41, 0x2, 0x0, 0x17d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e68, 0x8, 0x1, 0x2fa}}], 0x4, &(0x7f0000001500)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x2, 0x48f, 0x0, &(0x7f0000000500)=@buf_1k="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"}}, &(0x7f0000001580)) syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = syz_io_uring_setup(0x7f17, &(0x7f00000015c0)={0x0, 0xcc55, 0x0, 0x3, 0x2bc}, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) r12 = syz_io_uring_setup(0x2e68, &(0x7f0000001780)={0x0, 0xb1eb, 0x800, 0x0, 0x1f9}, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x0, 0x8043, 0x2, 0x0, 0x238}, &(0x7f0000001940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4969, 0x10, 0x2, 0x3ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b3, 0x800, 0x1, 0x33a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17cc, 0x8000, 0x3, 0x1e1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5075, 0x2000, 0x3, 0x284}, 0xffffffffffffffff}], 0x4, &(0x7f0000002bc0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x834, 0x0, &(0x7f0000001bc0)=@buf_1k="5af743222e00297e5b7665c78bc2b04c997f10cd81d814606316c43ade28c5984fe27946ab55cad75a4bd005e6d689d356191b2e4c0f728dea31c71b22c7e1bb71633be537dd06a2cd935901a7511bf57573eac6cf0f41803450431d37efa45e5095e01b6477fb16bd53f1e89aa97067317f17503a127add656b1bf181d7c4fbca6fbe60fedb67c9aeecc3c6fc5090f0467038b0b6bf555b0b5675ae086e220dfd1209ba7ba9e0a55972fd332c9900c9abf21d9f6ff6c25723ba67d9aca5243354239d73cef69bf1d3f11e1083e14ed932e0947ca43f0dfa201beeee6d4a4662d62d883773133297ed8582ceb25e7928c388ba412b037a44f98db03931d847f8fafcd22cedf22d2d6c89c796e0787a24ac70832e47152dfb1e344ea6e90fb3457447d0f84f36f0a2e05bf154877e79983b78375c7d2990c34cfe990fb9f229f1de37a0be67695b490b796fe338e026a4d6538f5b5c02420fc0fcda563e03b0ebcf914893ba85dc77030db246a55e7906dfb693c1e83667823ecb544cd3700aa6a245bc3deb401cecdb93e36f5566954b29b1da31e84239f287ad789267bd75238c972330a47770d65ae3ad92bc0cc01b485bda9191146feb5b0a27a9393d89635fcd12e5a32fcd8bbd770725e3eadf9d8c3c2b030496b08567d80469429957bf2aa3ae137562dc3ccc3afd26ff754dc994cbf82aaa9910e09307980a3dfd478c03e499fc19e6c0f66a6682a006b8f1141b4f6eef244fa0e33b7b25740a236bcfeecc3ce880d298252adb8292d0909175b623e5546bd0f2e9c6ae73e892a3e21ff757ef588b024af472edacc3087a683dd956b40210ff1c6412d717d8911c46809c1976be5c86819d8525c36518ee50496bdf5fc96ccfe53f8ec847906e6af7c8e858fd3f17b30ec2ce0fd13b235c4461c0bd73084c5dce071ea2ae0536362106af6497110feee40786e0ae20e382b3ea96765ef240e5f8a5279d01e482616b10b128763f088c2b2d3f4df3c253aaa4bbe2771d4cf81e0c32f6d86889fca7e5a90c4a9c2adf6b605f712a9f01b9d2899d2f635464d3cbbee89342e9059522824adc9e8674d38b3e6953913bc5a43dc6f27f208309f2dc3de3b1d23f2f462bec4537b8c23de6c04173d45a8ba85558fd9daf8349e0278dccb94118c9f0dc17f368a33f5a59679e67e06f497d26460bcca5a7b2991b5c064644822326dd9c4f736239ab82a2f53e2d89eed96ef8510b40f3f01f48bed38a829fd2d4ccad74cb34c4913bd8af005d71c59b7f1cce0fe803324120b57a68a7765bc0681f8b2d4c4d2398607cdb72a8a7da808d86e7e65cdbf75a3ec0f31451fea4036036ec23936e827cdf0918771c5dfcb2d9e3a643fb674ac745ea5f76700f6af9939ac6335e5046019eb4098c150be7c6da47beef92f30e5be67c856c195ee70ceabc06bf2ef516"}}, &(0x7f0000002c40)) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000001700)={0x0, 0xe991, 0x200, 0x1, 0x260, 0x0, r11}, &(0x7f0000002c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22d, 0x40, 0x2, 0x22, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9561, 0x20, 0x3, 0x3da, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bc5, 0x4, 0x0, 0x3c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5bca, 0x200, 0x1, 0x389, 0x0, r13}}], 0x4, &(0x7f0000003f00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7f}, 0x0, r14, '\x00', {0x0, 0xaf8, 0x0, &(0x7f0000002f00)=@buf_512="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"}}, &(0x7f0000003f80)) executing program 5: chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) lseek(r0, 0xf, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001000400010004"], 0x460}}, 0x0) executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd2c, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x700, 0x7800, 0x9, 0x401, {{0x1f, 0x4, 0x3, 0x16, 0x7c, 0x64, 0x8a, 0xa, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x45, 0x3, [{0x0, 0x10, "0a9e28aface5d37b02ce04f94a3a"}, {0x2, 0x12, "520a4e244c2c4a6d8988caf4b5446082"}, {0x0, 0x2}, {0x1, 0x12, "45f28fa192b9b3d11c7a395ad45d9092"}, {0x6, 0x4, "bcf1"}, {0x7, 0x5, "cf4a0c"}]}, @ssrr={0x89, 0x13, 0xd6, [@local, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "18047d80edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d219622937291bf1a88f2a7e933b9de68b10c358ceb836b1269874d68178d5ca2a64891b8ac2b18bec75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b511416252a03ab78abf8be2fc6313a03763da61a574a9bc59b728aa3c02eedb176afb984194f31696e2b3357c5757fbf99bae1c8dde4cfedc5714471bdd688ce6ac6e3d2a149abd76a0fe9a448d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef00"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x200009, 0x8, 0x4, 0x14, 0x12, 0xf, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}]}}]}, 0x154}}, 0x4000) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x8, 0x80, 0x9, 0x401, {{0x11, 0x4, 0x2, 0x2a, 0x44, 0x66, 0x0, 0x8, 0x29, 0x0, @empty, @empty, {[@lsrr={0x83, 0x17, 0x79, [@empty, @multicast2, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x12, 0x1, [{0x1, 0xc, "65dc3209ab639a3353e0"}]}]}}}}}) sendmmsg$inet(r3, &(0x7f0000005380)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe05}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @multicast2}}}], 0xa0}}, {{&(0x7f00000006c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000700)="be91fa2fba00b5bca26dd781291a5e58f6e095a3fe18a044c16a882ef401c75a9c6399cb7d283cf9a2353e5d1c8e921398f2694e5de968d59b113eb0f02679a2985ad3da4e54563b018323bf8fa6c78c2db05efcf1502bfc3dcd346ec1c146f1f502d40e49729d286ceb390889b9b4626bbfbea8d21c92d2c6f5a5a55d081ab37e6dc4e6b0b5d268ec07358a07b4a44d4a3336b2c5252dad88be91e4243dd8597e3ef9b443309c32f120f926eaa39e9a8de448548c9849550d1415a7526e23b4544d0abfe5a6175d35145012226f754d48108185f06d3eeef5901f8f9e194683b860", 0xe2}, {&(0x7f0000000800)="56654af29b88c521792d768137cd0104b5e2d4ae08f52be0ae02fd96b4474af8e096e9a7acd59b2e6f82feca8107f61dd73cb941050011832fc77e4e97299fd6ac2a92bb1d19ff0164711e91807c608bd3330aeb969d5fc9056920fc13c5501dbae29f9fb599e9ae6f7638a38e71dd27e381bc0e5d74f03335c5d95a0301cdedcfc9430fe6426417a56fb5791c9ac53cd3226d7942ddf31577d1939a09bcddf27b76aeb50bcb9a7b442c89cfc03c4ffafaad4a30", 0xb4}, {&(0x7f00000008c0)="300c855d4a8c0bf32812d5ee880782bce4368c7996c4594266bfd3602f07d181b4196cf1eb24710b565e3475d4055b572cd8dea1fc5ab32e779d0b920d1989e08a172f8562ba9f279f9d0fa3d87ac9e1e121ac27e37ec57ac6684133e65ef4e1a87899ee3db92fb86154bdf6e807c115e45ad3d3add0b3849a397da4a7c9d6d503a0", 0x82}, {&(0x7f0000000980)="9107023c45eb38eb9649eb5e0886a4eb6dc5257182c57ca1d6fd196ed14a15ea02e7608132eb54cb4b98fd4fc7a1a34768e5fc81e86196685d6179d16e5135ca9dbe2cdddd9f2329e6de9d0b918dbbb9efa7ffe58d", 0x55}], 0x4, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000b40)="20b890982bb196b3b8f8dcf84478eef778d717f8707a33e1c80a25e805a48c3f046adc797bd7ccb818299b1f939c48cc4db703eb1664069a5cc07779ab52c537588fb2dddd17d108433ef88fe8536c1bb6d294dc031a96e02829f762cdd210dc52e28f7dac0f20cfa7c797179ad7fd918c957373eb2183b85b40176900ecc8877d4a5475d5a9faf0c759dc6a2a372d8a535481c26e250d440b4244eba2edd1f2b60f7576cd0d971ef9fe218de9ede0a19e16300f76d6726281295d25d20bfc16e26d87bebf9e97e605361425fc8dd05b1d4b0f3a5e919436f078c5d59d1a8caf05c48b957723bcd39fe3264324aa3411efbf1f99c87ec3ca3a256139f9f139fd4b4491631985207ed06654dbec61aa0a82d4e607353643a4cd42d8661074fe50b218ffb7957f1d0c5b91eb070ab1cc6fbdcae5a3e2bd0ab2160d0a44972d8b85857c706440d45beea21ed55cd47f2573070b134c165abc79d21914fb2f98bcc2adbdd4d021ef5281777215556a5477fc49180800ff718cc1a5a5e106e9e5ede79373f6f5a5d7754f03f33d6630a18f0ff06247d65e3640624d29d2add87b6cf82811805ea00e48362aeae04f7d30a98be25d0e5b03e09744b60f34876ce9f9f9b4852e1e89439b141a2123dfcd5d75811b3b884e1810b057d9c1f1d51ae352b3feb9d6b28b943f628aa7e5eecd36cc9a588ec2d0e9863678901527a46e4c2cb07cc161d39eb1be0e334b809ba275caeaa71788b94c4a808bf87a1fb52278beb9cbc237cb513b2fdde772d36d9575edb7e81e7d4d85e0177f77ba7f0ac184dc324cf0d390067cf05e929bed8f8ba9545e0b9338c20fea9f66ec51325964e3a6462b97a33ffead0e7571ae1259741e8f3599c5b5444b55d11a8c9c5a1bfaf6937c66269284d8cb29a5eb40c475a231b13a9f975e0d5aab71d2107b6de9b8f6d8e89fa23f24ee2f3f84a146b8bb01449722cabced847836ef7160214cad228d0cfc6e71daba6a24b03f0c4d26cf5f6a7b858f28f8193f0cfbf755318a23cc95e5f2cc70b15df8130178b1b62b1b0d486ea5087f7c45d898d84aa5cf9388dc9f2882a9ce048fdd80a42f76b2a310914eeecac7add1d7aa10133f37907052a79e8cac582ed64857e43186c10da01b42f2d4db04dafd965ce5711f55ac4771882225f37b74b3f47041b3b7629efea4b5f696cbf16b899c0fca472b83f4d5e781c5a79fa39df751472f696fcd412d1fba0eed291a129fd9764151dcb7491522cd726e414e997c4bc469622cac78a365cdc66651464cc97442e27e40b3f5845ca22eb637b610fc9fe1b59a13f0e5d74168de69e0f3b3ef567faaa8119eb542e854be0644df9e8d0f74cbb866e37677b6019a8955147672d92cf7e655e5ed5310b54d520ef8851d9ef0b55bffea9298bbc55ba5d55514460f9339764fa184640497794096b789de1c5320cf0234851f10b8852a0bdfb829087075c55a3fab3a10fa8a48a250f5cb5a1b46252d605b703db01d20a8e7e07cef59083b0a47b2e2bbff94a6d394db8d892a9b48fcc73b9b15a754bc7e813e449d7aa6b943cc8a426cf0e2a6138d533f284ecdd97a760390775d4baf4eb72b56449cc8ba61eaecf64f9879c8b9eb52ddf014a51f384e8bb7ab97ba2a5760cbe6022bdbe8d9e72c8265e9a9f9b2411adcd0f1324011dca1851005f68cc2caeed20b8a811b8765233f3c240f25947897f2ed048e2019c0b00eb706e3f3a00a95e3d86445e545033e9171ad9516f07ca7fb4aa5569cd196aa62f6416687f1a65792774a62876b7a587c51b19e4444789538353ed3bd17965a3f66482e9b0a52a50d5753439230248032419dc581987cba72942c21b4d1a8667b997a7510d7ca490f0b67163d7a5feb7f3cd39510ed18983d75025a81edc073ceef036d3aae531121652202e6edcc5bc377b4d0d7664c86cd221d1fd630f66f9ad4bbdfad6ec05f2bea38610d110be7563716e9f8087d8e74ad29cd4f7c6e8b0739426c54cd93e9e939d686c575e596fc40cdbdada5cc14c05643df934b77e6d0385b8074eb1ecbb7ec9b385ec405b18807d5ad962f5fc2401a3bf3f0e8c89242f94b123840a61770682f556ad763d6d3dc297525423986e0a841c67292bda6a45e3813e75d3c461b3d2d249650c71b060424f89e3e02a2f6742de4757751529ae5301a7e37f767ebb8e0e7e55bcdd84293244f737ba9dfb481220ba976a69b3734dc271a960fee939f8c12769abffb7630e6cc83085de8e7ffc0c316280df8a64498786a65015fa8d1ae78aa2271257765694403f237312d7586f1051a72eb6b7cfcdedbb71e768e3e97e37915db3080945f0381fd638cb946315d8f6e6d7c2406553791e0e8fa7dcdb564d8962e514607cee83fe9a8207213d51f838db080aba4958a3b2fe410b13bfcfd235fd5b953c11a0293023e5df305b974b3d4c79529e55385fc4e5bb607dde2f655dbd5bee2da7313cb24938408850d4e8eb9631b816b9654cc860d1f890c84299f5abe400c8d0831c6297819160d706e3572f14d2c0bfbb0ba692dd4ae80f5486bda9a908fbef455aff6cfe954ef460001a50cdc8f497718f07d118cb718c70851adb5380ce5c9f217973d0b3839f529e40d4421f2b8976ebe2a5ff0603261472e9181894958e2dcbce3fa3994e6a56b90407db18bc094054e5697458980b819222a9ba52d09417e775871910bbb5f4cb5227b56cafa096fdb4c477297215d6ed8ee59ecb8f89c6524aa79266f80283652990afc414a74089693faca869416bb0c4fe874f85f756cf087b5b233ce5ad22e19cf708e0fa0c77054616a482c67c686bfbb1ecd40cf4b8d79dccf6330ab3172c466ddf82447c7e05f0d7cbddf0bd3c3744f605b4f2844f9999acd76cdeb177517408f78680e7c1de4f43005b245ce323a23795401b991e01a2b6eeee974e631346ddd8adad12d96560e3f518345b0d8647cdfb8b9be9d5a2904f234f9df399b0e54599745f8b04f54dd5948665d8b79ab294a2517b035acc0cc56648d16d7bf80e41b6e7a736114b44ae6f174ce8ac75d19bf45af100780f7354cc7ab8b628fc9c5d3d909305b148646053097ced6e6741ef287b1c78d7738352f7257e47497e5e60030517007ca250921f81df9d359c3be8262aa8e78facec4273f0c861cd67f3b53f0f53e50240ffe44f0cab2d4e709494f04ed1222c5d4e01ab0798af634f33be0242277612c75745a9d199583c8a115ade4c60d87b18980809093fe8f6074f5fa04f0da6374dea94b0872cb0e764ad19351926ba27e5b41e835be26f9a2fad04d5fa787b5df3bd0324bd0dfc9c206f34fb8fded9d5129da16c45fd1d46a3b80fd4a4f0d8b2367498dfeb8227f935a4f60e79f77bed9c86df466b9d492fe6af9565621c86b9eda957ad75ad682b2591173d963d02257e39d9ed63875cf30d339a809bdc800859284ed648eb4dd0f4401d2b8a2fc48f352917f3f26c1b2e42a9510aa1e1f86b7d7289561d49f1305186e3058132e2deac55f9e089d898914d7754a43f6afddce92134ea8f825a8467224685d3173b5a896a009ff501667f66360134a0e5cee6f0c47783c0ee862e48ddff4d8c1879c0ba59ce3dac650e71dd39d56f859cfa31aac530615a64f0bde48e8ed5a795dcbeb2a90dd1a6345f92846ba5fa2f15adcf6e0c589159d84adb95e189d8d2ff3142fbc0b3463f702528d29e4eb74ffc5cefc5fa598f5d0329548b99cdb4d73940724be35c05aeacf9796d3e9c8c9f51c94a2cef872a6ac8706cd22e44d570fb2a885ca4883644c4108b61f379c4dab9066786523ef221be94d34acb3f162c85b222a8a84b9e644c74feb639e9817b0534c9cd0abdae59cb23a5e0e74bb275a53cc47842e8d2378ab5e93e933ddaacb7442e134ab5112d62850e62d96bafa53fe30d504dedbfa345bb5720b45fe728d8d883cef9cd1a1cd27fddb1455e8c5119cd426a43bb9d020827f47cb8e104549c852c215c69401d39aaaabdb55ff0187d1ca72dfd493129bc2258a199cd8e299ca81daea6f81a7cd372d037195bf4cb5141fb0d7fa76039f93b9a0f43f3dc005901f8aa316a94ef87acaf3a3d6c8b1818677587ce0352bf35f92093db4a1cc27d708e5ce0a3e3225f946e267673a5b34979befe4b72e31cda52a009e6f44f5dfc592e456fd94534315030faa6eef9a3b48e28f537ce74ef4f05389b4aafe4070547f8a7418837209c35ba93bc485388f6f2d1409c41193b92fb0a55764cadcefc6f2a6dcff05e7f9fa5eb8a55c0d407aeecc267ed3818987a658241fd6a078c25483c259f24369ae116bfa73defda16ed680dace6edbf762800b2771240006e49754ab4f3a9c8e6f338798b6fbe6247376b21721b3ce328a5cae81202698f5b164a05c862d7c8c38440997af82fa09564e73187bf46ed1be342e906385dfcea9a4832bf84f3784eb0178477fe917fe48a19cc52787f0709fdf989d90facf218025a124ac82f5db7afe3edbf12b0f1b29f3c23376ac24a1781f218c9dc70a2cb5108e7bb56ecccbb67a5f88183cfd73e9f3f44ef08a608b5696a32cf395e3ef600a444234eb71b8808a390c2590f871d577793dc034736d41a15a2e93038d7b542312fb0c7c6abe1bc0fcd28aa5bcda8f984bbcef5f63512901b17df041aab9d1e06731496ef69d72d5da05d8113868d3e57f0e4612d98731fefdce980cf6aef4ba725086a95477a99ddf199c2c4c5b5ab0dfd8dadc5d143acec771cc93a5b298b657e7c373c6a55bdb43db18db20ecf3e139a53b6127b0e7edb615ddaef48797de8a62b44c963cf8bb1042e64b4af16a7dca2867b11f57066a4843d5902e61c69a63b18bbc88c30a498b73f390fb56f34b9780f83f95919ea0895878ca0da8e5abcdada2f753f1d9a52293225c14c041d4c165762b716b5f6f1a53c856fc0203087e976499d9580620894703bb476476d762c12269166518139377c1c65c2049dd5d4847fe6799678884c296ce5ec213f013f7b23aad376445c09b42ce9b9b9f227ca1b983b3a7672d105becdfdbe601b36fbaad31bcea8ec55e8eafd652a8bc526ff326c984e34b8ca738931e45851d21ce7c15983c0ea65a43367d67093c214d57bbd7e0c4560f98876ccedad41fa064dcd6ba45fc4e4bb30063b1b853e34077a492977ecbd6c252e72af3da4f625e17b959d18f43f8bd04e38167e7522f89be291a6303408f8b8d03fe3fbbb4a2d779b285655aee1320b8cbab9a8b86adba93a71dad75ccced5a83839da72d463f659c349a111c9122607368619022abe64c500b9b5adb05c6cd7b69a3ce05444a4a0cda51f550a78389ebe1a41d2ddc78917fb0e431745916456ef85a2d0e286130c11d4f46ca0dfb889152189a0fa13d3a16bc9667e0663b2c3ced9d74041848f93716c2c", 0xf00}, {&(0x7f0000001b40)="d2cc169630d343458c0d2bd5060672152ac6525dbf383444135207180ebc840151083e944a7cc891057e7dd72e8f329f4f096951099ae3ad89bc27d015a6b7bb9d8f3e6f9c77d5e1ba500ec3cacde2991a681d0257895f95596fc24457019b713582b469af", 0x65}, {&(0x7f0000001bc0)="7937b3acb42a5452897bf7b49e7c70a666eb4d7dd83f34ad47dad39be8b6f064fa38236fe4ba172812e5bfcda966040eb136051bbaf57a4bfdf0c7459cdb9db9f23387d0614aabe806a4b7b1ef36325882fbda8c07d9300bc7b1b7b10424947d536549506bab659044cab35a47de0e1895918db7b450bb39ce8d6fac3d31eae364ba3e456a1aa77e8c69278ada24136f20f62a5ac595598481bb60363aa85cc501e84ebd8fa534563c896653768418e7e55ab34a2b107eabb4e8e094309c00bd5c0f614b2f544ee858408de0642c02db9d16527143cf6eeb28642af2f2", 0xdd}, {&(0x7f0000001cc0)="4ff5858d4f1b09697e6c6915afddfb64752bbd3bddd9d720a5746c0fd225c54fdb4f146864403f10390706d411f8edb3130967db46ecf1d9f845b633d5381619d683c646fc2f97025174a7afd52a4fc4d1037e3eaa16a86fea285d6d463d0b0516485c49cd9d649e71b6c93b2fbd026579781d2c4168477fa72824ee9b787b4f29ea3cddb20fc7c7a8e532646547d174e6ea693f118426c3e3439a453fb52b6747f60686e3b49aab9d6270f667b6ab79d79d9dbd1b90", 0xb6}, {&(0x7f0000001d80)="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", 0x1000}, {0x0}], 0x6, &(0x7f0000002e40)=[@ip_retopts={{0x64, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0xc, 0x35, 0x3, 0x3, [{@local, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0xbc, 0x3, 0x3, [{@local, 0x3bb}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xa}, {@multicast1, 0x5}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x13, 0xf7, [@remote, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@generic={0x7, 0xa, "09c5f15e669755b5"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x1b, [@loopback, @broadcast, @broadcast, @multicast1, @rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0xd5, 0x0, 0x1, [0x6, 0x200, 0x8]}, @rr={0x7, 0x2b, 0x1b, [@broadcast, @multicast1, @private=0xa010100, @remote, @rand_addr=0x64010100, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, @remote, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x44, 0x3a, 0x3, 0x8, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x5}, {@multicast2, 0x4}, {@multicast1, 0x8}, {@remote, 0x5}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x74c}]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "59e0ed765ce5986c25"}]}, @end]}}}], 0x150}}, {{&(0x7f0000002fc0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000003080)=[{&(0x7f0000003000)="51d6674ad22fffe5df284144997c0fb8eac9b96609445e5d64", 0x19}, {&(0x7f0000003040)="1033e39c751e2dea44ccb24fdf39116fe34d9205174c6039a02f33384bb55199d9b75312168a78686b15db5f6a70b50236", 0x31}], 0x2}}, {{&(0x7f00000030c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000004100)=[{&(0x7f0000003100)="42cdee2d69a4ad562abf0828c259151320d44ec2b8774323f20b8f9780407f47808e329b5ebd6f60d6cb5cf1af898e712ab8468d072c3fe143aedfafcdb477ddbac0c43cf2141fae7be9b6f97a0668df727cfdccb0056391bd40f67d11a65ec59e32983112905eb3e1a0b47e92846a438ccaf7b0569346b01f6bb34cdd4680ef01a6ea0765dd933b9b6d1f9df3588347ef31ad4bb5b077103d550e83593f178f3e696ec32d1621d574deebc31a7ffea2184df2a5b68b52ed492d1f6d33e943212425d3893c4a75d4f294b1906d20da63840216122583d25f2ae0b9e976178f22b48630152731d14b51d62308b2d19e5ba2354e06244d56083bea687322079903790b8e7091a1b2c880e4941ccb79562587a86443e25be9a81a160ac0dc6960ba4b966e0bdbbf00562a2c26d644768322ff42739809ca3e7fc5baff62be024baccccaeb780500aa5e559a0585f360c3347a0d943ff293fd64277066af7b0c4444d95517c50d4861ffd38c4de2687d70d523e33840b3c0152eef5201516707abe4ce9e62b42f6e4e6247287f835734034813f00fb57cc39443ddadb28cda94bcafccafd2ab7c46011938a70452ea1e06a4b45a49c9693458ae353ee29a895489579baa49ae559b6fc74a87ce34dae0a754f8023c7cc97d7a0ae40a7ffcf69397c900ca110d1980b96cb80acd30465bb0fc478fff4677d449bf7973a85c28e1e5b7ad799d99d8534d3be7632cad0c9f1651ee43c4f47ad500102d62b0c82cff5cf29aa6d64f88ae0d3888532879a42afb65d298f7a8ac0af238a2df7dbfb0fbca95388abbdc041ea69ee9366f0198f1d9b67180b950aa6653977f684c751527890502683afde4a0e928242f982909911f64192717d03c516c540b6324cd22e8c5f064567e97fd2220ebfa4c43b0dbf579d69d152b6ae06e50911126d84c37cf11bd08d72c02c99b71102d94a62d9242732e2bca7b83b1dfd8bf592e2415f848e3a5d64c8b5b5ac7e73a4eeabc741ff3981622925aa0429b4b8e32fdd4ac7a5bcfa8fae309a25a5db8167703a873547ada87fbad15c7be9090f6c1c78e276f5deaee65b6532c5d99aabe9e6537c3dc2783fe059f1e53252b40976906d1609650c03a77c1cc013ff0aaf3a4dff21ee90763e1f4b1b8fbd25b0e3818413d9e91334cafeb02ad1fda7e55440fc5e730914e576dcb8790df2a5b26e18852a9920832f552c100f14af25d2fd47c138518ef6b4c11ae67ac1c59cd48043f2eef75926a4c6bfb8733f38f3ca79680313a6944a60ac433d8ef88613ba1e5a6faae02b226a245a1898d316a8acda62c16acccacfb048cca9d171f95c700988093442239d7874d84438f89cb13dfab4ba6108d92691e07880f8c3e1c70f6d78c4f3b237ccbd866b58446890f90fe93b7b2802ce17ea3e2990a988665eea096c32a9082071129a736ce59920dbfa9c89dc619784575029e49ae7fbc60b647dffc80ffc017667f1fa94f4e73ef94f38b1f383bab403da5b83db33d967fbafb8efe24dbe9b181d163ab06bfd27c8bc8c642e67284f9412f943eeb4925f3233ecfb7b7221011770605e66821693277960e44b4ffb6311f83e39686f56c20f36d5d362cdcb2184c5ee7b784b635cb6706d05767a8939f8dcf1e03f230e0fd81744a76fef1ea640e3b434eeeb4f3a607d98b1b16fb47f48cdd13c65bda3898be214c0f798cc1f3360006f5049afbbf7fef25c819bd4eb3593ba0749c13cbda3767ea0f6f743275575a825e07a78a613c5cf123d0ff1719f5a1757ce0ee27f860220fb990feb8fbf23bacb9c50d6222d7ffcd2b6a5823c57b405571b2510a72e57e03f6c2db12c1291bd9ebd40ada8448f095c9b9f51fb4b07ca1b103ef900f3b232688f3e5b5060fe69f9c475697f338d17392a79730638c08cc11c1cd7d620d82898ed10de1e1e430954a9217a7be9ee2dc34ef7afe3795760ba405bc4795730f001516149606f259faa46288355dcae7123c294ac5b97b2d529870808890d99f1f12950639c7ec3dbb21b1120a5e53c6830f5d2e8339bc7c06cadfcdde4fcde862ddc5a80479eade9e14b8a5cd95c8929e6094917b2d4047af6da120f3c907832e54b78e4fb8ffc43728a88fa30782cee71c49d8b8d97f1c8d5a4d8f08c6022202ebd2d3b23dbb3b42ff091259b2c5064e26655dabb3007f0549d1e4a229227080616f8c92fa4cc8c498013b1c1d5191caaa074f6e7bdf30a3e87713264a7b1f7de505dd71ea8c173226f88dfe210dcedbd8081fc634aaf27faa34cdbc8694cf949e22299f428d343e9b6a54db3d0cd52050a7495257e4837944ca4e785d057dde5d34af9264b6b41f5af278abdb88fe2e3850c254d4abab96aee2f907ef5858e5361812fc468bdfd9585742fd1358a0e2058519007bf7817ba76ad6052d9c227e3b326d40fa3fc1626fec490056e6dc2d16dd7bd923fccd74240924c6c10225c9ca3c47aac78c27fe3423d7ec5ad0d8db96fc4b2edd881ec72a58898c257ccc44e60d333dc714c26b7b0f4136109f8d3e18e719c73e1acf029dd941aa17d41215c7b22751e1b4067409e4cca4221948389a1ebe40eb35ed3d61accc1554843ca03a1e3ac5c5d6628faa8f027463a66d424de51cf6678c0293121520865e431d886bd7c11bb96f56ab45b796ef938661fafff645ef1a82e2a5f0ec75c6c1bc10cce22bba0a7b72bd6e4e4ea4d3c04d9b479852546343e15866224a8388e7ffaf86211e06c964bb4b47dd047aec3fc0cbeb8cce4975894f58f09a26d5a50a95e22eb31366fbe5ab8ccc0ebe1295a31078576db630a5d5704b66672b33de7365e6f1442b7482cc7df772d7ac3e8291a81462f215020125f5dec06eb5ac67c5faefeb719d36131a1a443f783c62e7e0eb00dca214906dfa431b8d4a49ee9004f9026b03c0ec92b11db9e3ba43a6d772aa7272aa592d5591286374162ad796aba5489cf0286e7640af6d15e5f050d498236c58e913d71344e263bcdc3a98c87785a8591420975ab1a3cf019c256ed24c659243eec882741b3874a07c2a59c0120406c36a8c893f3be2467ba62c0992185286bbd3329936eaac16a6e66175ee4edfca814d75c43eef5a137e5fb049a495b5da878f41e43a73563bf57babc000800e55690db66e8b02bd8df35bee0112b2e0b532d6fc65bedf6824d1965c376f9b21eed58c1c49945c8a8fa559e0d70e6772931f41067f482e7714a554d0b42edaea8e4b7a0412498c04ce3718b1b2bfc065dcf5708a9db10a9b96ebaa4f42908302693b0e10558bacbca68b7993494476e02618497e9a108f7f92ddeddf0a67d998743caff103f5e1b9279898ed1732668481de983b574cfe5f77976e6e7d7551646753661d519f28074ddfcc1d71a86805c3c1402ee8d67580a56ddaded086a65e7a5af5151a642822ac7e8449ce7bd95a3ca1e228cd7475291fa82773425e1755f3c1da0ef75f0c4c3bc136e8d6d895bb221866696b2bcbf1ed26937f36a8e8b33e465e515d9ea9ca0280ad129a5486e209556053a5880de5637ee0d0b5c2cfc2ad985e9007e1319cd672203b30f8bc37698728e0808c76b4f1b2f0dc68be0d17f8b53d47d0e40379bef1aacebdf3efa6d51a19c37a9c98e4f5685ded56bc55a3948f08d786825c9767a5aabce5e6a0fc5ad7f23fb52afbf8220eb6ac72bdaa5dd16b43bd01678d86f16a8a2c619b10eefa6652b2f229eac079964d4455dc2c5570f27bcf4e7167429ef0d3d1565d6151410a68f68a4be344949729baae75a16a71c7822dc09af32e645fb181b5423118d125b4236bab8c8c96c2a95cdf7a2121f62dca519e0d24e23e05987748da8184addcd4b2213c42700918fbceb14e5e3d143739fec41dcf9af38a4b0251820d7af62c0fe1c579d71e6a7fab06d2ad588da673e1e993e16b54600aaae963ce15567d81caf8c7f18e4743bdd4952a7ed887b8b6fcec1f70e7893250633981fe74e89e88f62281443a3e6f3a9d6bcf3e024410e3d1884f7c5926d851575e00099d0bd66a8c6d9565eb8168fe01e12c80078fd2e6f43bd412b58b9d7cee8ebbda2f3d7c1372c3062fdea12c463b3e5a3c859e39756b65fb7f2eb8f7924700041542094ae07c1980590dfe2d49401561da5fca8d501abd8137088acf0e2b72fe2455c882ba461c3d4f19860c513fbbe98fdba5558117b8184d64b4252eb0c08e46ffa2008f69219d9d6d9c7aad7415ed993fe9d713fa255149438f50d5356c77195322fe556621d4399d7408cd691b88f7e188d5ec422945ee9b839defc87982ab07952e889bae5e090a8afc887eec477b230817588fc258d33dc90979a6ab6ebf3afb9f1f206818ea62d4afc6cf9ae169b1b22efdd954c02b0e3cbf1c4c37bf56200b99713677105c62bda5b8220d21cfcb4aa435fb934fc702c1f4883a32d9e8b77116fac674c84ac6a63e8e58574cc9f128f3ba5a42a709a99d93d615f83249e25ab95339e50194642421547f9ebc59b9d69852b8039cddf075a3d80625fb02d6baa27f8fd0e87d2f2b9886ba9e2fa8822733c6784783cad50bf0967da057f97dd60ca8330ae1030dde4a7273059dbb9b6f957c5eb79305e00b8c4d7eca734eea81f33f0a8571358dd827798fe4e21883c4e9808226bbc86802d4b94f1f5eb90fb3ad890fadd4d27b3246474ba8f4a4cdfec2f8d93abc82ec499095ffc6c7c900d1e4eb0ab0fe9a4347e1044757f9ccfc4f32d91de585e785555ffbc8211cefe4a8df3ddf9fcd974a79bb6a231fe418e3c67f7b5aca597bb0c2c750a286db362649cb6e2dc284dd0f457fc81e64b1b270702713e6e6e5afd3f9f7a2c7da55c1b190b0eadcdc86e24818d73041e436358ef33d8adb88625abb3c7579b380a75a658f4124c04e68875e5974a5b932a50391a9a096bb63e29d09cda7871475795ee6fe3aa68a7e77626c02512bd4d8dcdd97b74b780d2f8910bc04719172771be0c4e6501195df11a0030e55cc63e0a5d31978d10efd8cbc79bf5ce653ec8d0937e1067f309dc076d54f7453137538af395f6534c54128fa3986a061f708daeff347cd8d2b1a77d7291e66f604aaed5f06b2d8e4df115cfa4129931c1771bf704deefba598faf21e235b8e23c8165118fe77b9942166248d681be76884e4a6caecad124f1b29b9d36406ad4a453de901ff3e3da15b308596c2a718bf25748c23ebad108f487cfed1488482c0c63ca9430774df8e8a3e9d08951f08352468013b574028647402ece4c51860f49887d45072a409c43db70f156b4952e1aed7931b5d74a8a3670a83ada844485c00de613f6b87dab895e8328820ffffd866240722bf38510a855e0ec4ed34de59f02f2fd1d4b65d39081532bc0216a6e65bf25fe27c8dbbf861dee50aeca458e3a1f21c368b5f15cdf777218a4be03f0ad0b3cd322c106c0d68cf232c0818d113d4fca5958a62dc49ece3ad7cb735abb475cf1e3b4a88a618ef6482918819510dabfc53d8f411d87c28bfb6bb86252f4872e8750b28b12543a4cf3af7089a622eb32dd84b98ea6f0b2855e63bc0ad96424a0c04b301d02329ac0c2e1fd909881c077c6d59203be0e9ad2d01e5569de37e89e8589828af531c6d2a0b35520fda7359434d191f1ec0a4bf3e5b679587dfb0961e630a76bc7078f2003ced24b1c81b001288458bcd9cbc8a4df03381a23bea23da3322f0fc37c495716f15d039d7301a4b5b3cb0b276dbe60dc1697f2aaa570c71d68a3664f881fa567eb91b5b8a4c9f8d976274252d51b3c4c08213ba4bdff7", 0x1000}], 0x1}}, {{&(0x7f0000004180)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000005300)=[{&(0x7f00000041c0)="985833e80d8962854b17855a71b3eedfcbf44d80", 0x14}, {&(0x7f0000004200)="59b4157b21fb51e500a4f939058bb9fb910819e8358b0afa7942bdab97af6b8ee6ea85ccc9747ea9fb5a368d1ccc9265789b25a02d0f5a26a49bed376b0b65d9b5023a080670496d26a08ec6edba481ce079e4a04c2541e5c1ac94da00570fe243748392b7735139785f57ff0e39c6316ddbcd7812bf6d43d225ed80206248b35ecba87896ff943c70ed8f8c3674f29c5de438891e38b704620226cc1e3a96d08ac202327a0534d96efb981b87b27dd916eaded2f28681e01f42dee0c1492e3f2935", 0xc2}, {&(0x7f0000004300)="e9026e3d382333a8f5d71dc9945c377269c65b164bbd5856d702f7422ea48bfd0f83f626988fe6cb4fe21aefe042285c4668c6667a92b51cec3cb7abbb031188f76426ace56a7638f17e10baba92fa850e9faac8a196167090ebcec888803b73816c4a054af68bddc4bfd79b4eb9a8f9d28c4fbcd056dc23a72f6eaf647ed21de54405db1a6b0b73b5930bf2a466bc998e8a9a7bd19de29ee1cc209809389b5bd24b702d34940ae629083425e743be89c00eb4682c8d304aa624363d9631b3b4d26d04851d31f23321326bdd0ad7d79870091d59776afde556afd2850a123a6f75d69a82ebea7f6546e9e9edf8ec0d68cc150e4cc73fe534a6d13d7dd6293a3a880e6191b66141ea37069fb71b3575f7919bcb8a3d4bab7934c373d953e24c6af40b01463a26f17a47d33abcd7a014a0ce485a2640e4eb237c0258f6d5ee0392dc71121e72eb683f53503438a51281cba352ee724b7302d9ac16ac616e7f537d99c8eb89bfb802918e1a848a21fe6fbf69cf9eb5e4f38635a7a81bbbb5e612dbe1df16b1421b6e627d18e25d8f3073209dabce7df26fe0fcc878edc0071f88b8eb738a3f750aa26e57dd5e29b2f16e2666cdc4b3ebe02cb951b7ee1faab40d3207690a0e9fbaa9fcdd0c9cd162365ec30ef9129f73559dfd99fbe86d1713de48e1de2fbee83e57b82d72904c69ab5e5fb05a974617c6ead674282d5e708ba481b9068d6ea3c74d1ffad73e184b4e3cfaa8cbe0877f3681a433eb656b6093cc758bcd0cb81ac981206bd0205811dc008522f86d046c06442c11175efdbe0a1a19d4a7b756be5b6b9da0551943d5a7e08913bd9055fd53adb26e927a6a72af7f6bce118f27967f1cf7b0c9df41bea5f2bc43f5df3747170fd993865db32eacfc7e4260f53745cbbed618c298fbfede425843a8459043f7385a9e35c39d60a0b86a84c457b4e769a7d17bd832a85201a59658953b2cd68b7b335926a5e7a9ed65ef93b1d30eaa76bdf07928523dd852addfbf5726db657bdd512b4bbc01503554440713d42c0a7ec85391a5ed8cd4d4ac6cd27c59005bcadc39854e0b9a84040731ab2187ccdb21ac14dfa94d14a22e1565906d6eb9fbd412f4443115d449ff020f67ac51feb8716aa2d79ec87043382c3c7ea827842317afd8cf3e562b6a4b4b755bbc7a59eeec6b8a16fa0456eacc72e72ee3f37f95a48f116eded3ef6c0fe16897744e46b63f3ee5b80e4a96a0e7a71006999ccd7342f850ba23a232230a10e6c7453b195d399256adcd423454424ccac79d86361b30ef3ad870b86dea01701fc956c7b87cac378babd36e69b0e26c5bbd7337a328e94254e7273aa128a57e3e5f431ffbe5d81c094ddeb1c6e519adcebf3166b70231ab659994e40823ea2e8fbfd60868f6d3dd5b690ea94b31c456f1f0d690c79beb7b90cb7e65f5ac5d8c98e05dbcce0bfd383316e377bd8bf22b6dff70d572ac07dbfdcccec8f8c9b0611ccf9a7c0e73a5d1ef00e003780ba8c210087a4cc453566f049ebf0ce08321810d1aad660fc27ad0dd4b608ac0d6c8abfcd0f303911fd9c2e0b2435975e18e4d2cedbc519746e3c48ae9adf71f3da809893478fbce7d37e371d01e79ab2a6c5d32de1352b697f4626421db7cb40f248f32df3549a820a165a36d0bcb003f6f5c20717ef3459287ce8f90f1b38d15ca8b84dc5aabc40c2a5fa51e263de0182f4d3a6d4c9bcd2344e1f21ec769f8471a62c2343e7b6613f4b2b08faa92df72e198ef2eb568ac83c007c4273190e3e76643723704674c5f2f2e7c902dab09ece92edbb5488b783043bcf668fe27b8f752f3e42d1c8a925a8730925abcca21abf0e2be1ed27f7fe96af854261f0ba14b76902174f575e18a50f6fd3bbde254ad60edc924dda657431ba901a98c4be1b4308e548a74aec2da9eb4552b56fa0fc4defa571d57bfdfb3cbeda28a0058fba3f6f4dd9a5c754d6b59d708bbff82401e40b771368576b43fe8daba10998ebce456a8dbdb059775ce46cd31a37706e6ff5b9aebef598f37948c2b7b9e7262b5ccb1568b0365fd89e921993d6e64e1209df73323f82ba061044a0f18b369bcdec7c03f54d309190e0f1b959b16c0fa8c0357012a086f57d8a0a54b607ed1dfe622bfac5f8db5eb84dd72fbe034df9f7ae458850dc9febde3f996bbd94ffe975ceb5845ec4eecebb3627298a31ea3a04f5e759152274d17706b77907e700b83b03a58bfa1f0858a81b095cf92e90b272e8b7a054ff77c5e6cb467ac600be50813180351dda0b5a54242beab757f0e82f83e40c86fb14642babf13d2ca38a3138602f04bf9c7f2ca6ce68ec9b97052f921ac0513c478166ae8f23d49d8e9bf778ee9e051c0eb824ac90bafec797a1d7911dd6564c38942155aef9e2418922e37ddafab576adef3ebae11576cdebff7e743441add434755fc446cadac83ea65831ec9a781679bf4f91e99e7bcdf362d14e64a25f21d6725bfb003717fb777927509b1938ae060521778790548b86b49d21e557fdf1edd81fa7d0bab028bd2e86db44570dc626874c3c90d583cdaff8ddeb08b3993b238eaba0ef84365b66b879be769c038c590a2b42a641e271f2903ebf691d247ee5658320d42b859f6c37aee0f95cfed3d545ec9bd9ce2e33d8db7eef5fd47de07252b2dd585feb51474a6c6794a3224f68b3cd99d41f0a52d8703c4be77e4af6acb4771b3d6dfe3f0d87cf344983c2687baeef7f439e83a8595cb1324eed7aa759e91d98de5b5b09505c5ff2d416cb9ee373704eff9a3f3506e8c3dfcbba90274c29ed29e7afef9f7df18f38a3a38f7779fbda2689d44b668826da6a25f8118b7ed12a9390673a2cd79c4e9f83df300ce23ff9a8df7d0a3222e7e7875654b7e793aef8aac04a581e72bcdfe9fd0ab0be283db0ae39fa5e970f0b3090bab7893d48d08d6c7141c71f043bc6ba670cb8d66bc52f9ca2a8edf7b7665149f3e6bea4034e87b54d0b07ea5f109e90eb53d32d5a342dc0f803d998dd662f4d3671addb63b1141c35457bc333c2413da4e42332df411de8f481da2d4b714f624efdb844c43a3ac4414d16f16380ab3ff173686a0f055c82248a571cdfc00ab7fbf9d8b1d04185aac5ce648466a9edf2b2840b44a2a43d41c4c912a30a388be3e6e09db6b357af1c402cb6e2cf382123fed07a3c9678d0ab92d44b86a49d83a9f904efc708e0aa594a6e61c9f27f9fb8f82b041043a38dcb4e8f2ec1cebf2d5c75da1b68a1139598a2c1be93550665b2820bcb65d6c259d9b03718440de121142b9aeef5337801f77914b29d4d573d2d2b22de02fc987276fafd0fca71d58a3b5cc63e9f58c7b03fd3caa45560dec6fc632c94c4a924c60f5591969e9efc3283f8e945b0f569dbfe8bb82c96b7644173944437d452afeda4f1c9132bcc01ad49f14e1f56c18ae20d7d2add30d5c53fb5fe527a015eff7ce11623bf19919240045d25f25dcf822630bdba19c3547eb0f404facdae07bced6f78f4023d6fd5894dc720648da755818591a02a59fd76a01087093ff67a70e1732b5a8f8f530b84189249d726e11d941e198113491e63d1dd2dbb6d6b75e86ffdf7ce06cb26b3a1eea662d26df9614c5c1699887f2e2eb201733178feec11628522e1f6b57c28e6317d2223178fb3fc41899fc686359d29d4c7bb1268f10dae9bcbb47b3ac417b153153cbe4cd4272c02de2519e756b0651e0a9cc310df42709fbcddfcc74d48661d411b042863a1cf8659ada0094b7ed63f8eb9977dfea61815f8ea4f3b91e7f4fc3b2d7180b4e00c6ee6c8d8175792bc1456ba148b1bf11784b65b2294a7270f23acbd067d5fe6a4b9ec1e0e1e3a20332b5820434c91fd532e348742f73973cbe775b2c6216f1bd912a4f4c735ffb1133e21fa6343cec54e76177bcd65db3cd8ff0e3f5df430a53522b0424be3100e3b858c0aa3d62c4d9fb89870ade319291bcdc7067d4dacfb9325bc6c426d6504a66462b1b7851226a30125294c82b7aa0298f200f82c568b3da2b1e9d4c5fdad4ce501f75ec980505f8f15c5266b23c93712d9a7821b499b66e8fa3d8e7daa53d0b98e295cf1f051e27a81fcf6e896841ceaf81605743464db23517b7151ddb30af8190c80dafabd8b7fcd71f1bdfa6c8301ca6daecaf5f09d813aab779c92cf15202f09207e292757075bf69349ecd1ce18da85596d52dc30eb4f5ab083737e1372403171bfa225f60a5b82acad1a7cb42c14ade148a66dfbeed6611e0a6b7ae7602bad8718c15cc0dadbc8109347ad0b147c414124ceb0c2bba0f4bca32b1af2c7417840bcf3ad865b567f5bed85500288ab7e587368527e5d72b233f261ca1d10c894b4750a9a5b0c29ce99b242fe427d84d73f5eda93bc44b14f8339f967ca99a22207629d380e68fd417927c181b5ef3ed91e3fd7146e6910391e34cef5a654de4712f803a9995ea700f8a5215c42872c608746533cbdf9041a7c15174895802c6114e18596fa0e055830fd7ac3e4781a4c14009ee6ff051f83f8275b14315abcdcd69fc8949c6945a5e63ba444222a5cdd560495452a252c75ddfa0a51efc8b5ad9638afc36bedc94c220ddbd98b548d5469d55171bc5fa80b8bf81bf0ac32d5ac1beffebe83e4d9259caff26077128dad3e3c08ddbbb7a3a3df682603c151ce90cc6d15d6458916d38963da3a3eaf8457f5a093a8677269649d961db88b6ab8fecafa60bb70b2d4b5b96d663db192c38eb62390d3ad0000e0f49963562c7477f82afe242919c3b08ea55e76c256c8d8f0263807d26aceab493489260d0741e9e2bf3a8d76dd06d9be2c275deac37d6b4b84cfe3a6df45baf96e6db9d7b0b538d3e5997cf64dd32240ad33cf29e18791148d6b7cc349bbe7da2e3e9ac7b8f66f69059460ee7614ca45ff2bf082270b023ef8103b2f7d86a6c423909f850db053b9cf465687bfbc22136e748e273cd7eebb11ca9d8af6cd693aae0fb0d6d194611e3f6492dce179c199b98654aef266a0847711e09c4fbe8040b23f7f0780962bbe2b57535fd517ae36fdcc49e42cabd7280e1f3946c194d3c756fcd1edac8ed0f60797c699a2b2f51601a802c1e49008aa4761685caa5713e2b024e85d9ddd404aa7877051be78c811744c366e6aa8b5c91ce9aef6d4cab87d21c0796999a84119bd19e59e3db14e0736b9e93885b2c04256179cfbc44fc91da08df17afb8c021fc08f5a4eb2f90454abb15c0c55459c6832b03d293aff12a58aa69b89c383a9a8772a937b2c36fd6101ffb050b6e7cf8da8ecb8df57864dd88ace2196e7054215270bc9c48e2487af7944ece20c2a10eaf012831470c3d69e3885cd13b75938f39ca76197990c259a2828c3a55eebe0752ece5b91d2010dc9c1049a85f9af4377244fb67d058564768c6683a131ed6371b2b0ac8d75018d8c30f81e39bcd2597d50bde2a5348ae0f5d522d65d4239e34adb591972e95abe810e2d98aef4ca4c248a362fec41737cb092b2855f702b8a7e86a0553c09522ca789aa4007b03949722632cff47ffb9e41d0fbfab8092e0036ba40b24d10a715db9d447274934eb18b3cc6d30dbe9905828b16bba30dcf1ab843516", 0xf80}], 0x3, &(0x7f0000005340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x28}}], 0x18}}], 0x6, 0x8800) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000000000000010"], 0x28}, 0xfc40) r11 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000040000"], 0x18}, 0xfc00) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100ff"], 0x15c}}, 0x0) dup3(r11, r10, 0x80000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x4, 0x9}, &(0x7f00000002c0)=0x10) fstatfs(r5, &(0x7f0000000400)=""/183) executing program 5: r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001700)={0x2, 0x4, 0x1000, &(0x7f0000000700)=""/4096}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x6}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x232) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r3 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x7ffc0001}]}) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r4, 0x80079a0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x3ea7d9a5388d573f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8, 0x700, 0xc, 0x2, {{0xa, 0x4, 0x3, 0x3, 0x28, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x50, 0x0}, @local, {[@noop, @timestamp={0x44, 0x10, 0x4d, 0x0, 0x3, [0x4f99, 0x9d, 0xffffffdc]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0xd7, 0x4, 0x8, 0x36, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x1, 0xffffffff, 0x100}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x2a37, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0x8, 0x0, '\x00', 0x0, 0x7f}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000028c0)={0x2, 0x0, @ioapic={0x10000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x3, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x80, 0x4, {{0xd, 0x4, 0x1, 0x32, 0x34, 0x68, 0x0, 0x71, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0x1b, 0x0, 0x3, [0x32, 0x9d0, 0x0, 0xfffffff7, 0x5]}, @timestamp={0x44, 0x8, 0x4f, 0x0, 0x9, [0x1000]}]}}}}}) syz_open_dev$sndmidi(&(0x7f0000000700), 0x80000000, 0x2080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, &(0x7f00000004c0)=0xc) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000800)={&(0x7f0000000740)=""/159, 0x200000, 0x1800, 0x6}, 0x20) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x144, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000001}, 0x4000) executing program 5: pipe(&(0x7f0000000440)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 33: pipe(&(0x7f0000000440)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000006c06fffe8000000000000000000000000200bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5011"], 0x0) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_buf(r2, 0x1, 0xf, &(0x7f0000000140)=""/248, &(0x7f0000000dc0)=0xf8) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000540)=[{0x6, 0x10, 0x0, 0x7fff7fff}, {0x3, 0x8, 0x2, 0x4}, {0x5, 0x3e, 0x9}, {0xb978, 0x10, 0x6, 0xffffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000280)={r3, &(0x7f0000000100)='\',\x00', 0x25000, &(0x7f0000000580)={@align=0x55a4, {0xa9e5, 0x5, 0x401, 0x1}}, 0x0, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000240)=0x1}) openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x2, r9, 0x0, 0x0}, 0x10) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r6, 0x80000000) set_mempolicy(0x3, &(0x7f0000000080)=0x7ff, 0x9) (async) r10 = socket(0x2b, 0x1, 0x1) (async) connect$vsock_stream(r7, &(0x7f0000000340)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, 0x0, 0x20000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=' '], 0x20}}, 0x20000000) ppoll(&(0x7f00000000c0)=[{}, {r0, 0x2402}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (rerun: 64) write$cgroup_int(r7, &(0x7f0000000380)=0x7, 0x12) (async) write$tun(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000060", @ANYRES64=r11], 0xb2) executing program 6: socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)={0x40, 0x31, 0x4, "1b145368"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x1, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) r4 = syz_usb_connect$uac1(0x4, 0xf7, &(0x7f0000000300)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1037, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0xc, 0x50, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x26}, [@selector_unit={0x9, 0x24, 0x5, 0x3, 0x2, "2f1248e5"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x404, 0x4, 0x8, 0x7fff, 0x5, 0x7}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x8, "acb2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x8, 0x13, 0x4, 0xd}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xdc, 0x3, 0x8, 0x1, "0f6378"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x8, 0x1, 0x5}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xef, 0x9, 0x3, "b97dd56e4ac17b"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0xcca, 0x39, "15b8e45186"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x9, 0x4, 0x9, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x7, 0x40, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xf, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5d, 0x2, 0x0, 0x1b, "06c78d81"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xf9, 0x7, 0xa6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x56, 0x3, 0x8, 0x3, "ba"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x7f, 0x25, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2dce}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x2, 0x0, 0x5, 0x40, 0x1}, 0xbb, &(0x7f0000000480)={0x5, 0xf, 0xbb, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0xf00f, 0x1ff, [0x3f00, 0xc008, 0xdf80]}, @generic={0x48, 0x10, 0xb, "6065cb02a90ca3cf63f65263c351a86e3c4ca32c946ecd64a2c47ecc6c28fe620b44e1ba714cd7fe0500765c28561ec6ffb0ca692a776e5e21f1bfb3e0a8d1f8ae9d141ad9"}, @generic={0x56, 0x10, 0x2, "67ea2a4e34da468a7ea5841e56da2f584d9e3c47c995c9abe3e5a386e31321b8b0a4d17a84380e0c8317608c48fe0ef652d9818706af92ea4f08fbf3d7234c1cc4827de79750adbfca6ef53cc17bc299c2c444"}]}, 0x7, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}, {0x2a, &(0x7f0000000580)=@string={0x2a, 0x3, "e3db0ec4215af5d9316d61297e885045268bcae6ef3b10a46007656e254e730d8e516ccd8cfed41e"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1801}}, {0x70, &(0x7f00000006c0)=@string={0x70, 0x3, "49b5303f293245c96c2d6b4f02fd4a540a6da755eacd4606666a18bd825b87cc1dfb9c710a0a38eb4fb60a3b42dfaa1cdb87247228623479d242a0120bed0adc84945f0aeef5034d4cfb47e0d482be74b7b70c595f6a75ce1728e149faaa33922d6fde34154e2915f5fec2836ab6"}}, {0x1c, &(0x7f0000000740)=@string={0x1c, 0x3, "dbaeda2b49ad9a668ccfe41a13e4eae32a1980fcc2609b4aeec0"}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000bc0)={0x14, &(0x7f0000000a40)={0x20, 0x0, 0xe3, {0xe3, 0x20, "9a67a8bfee2eaf7c013d1592eb13562b997cab9d6eeadfb922ca0f5b26d51ea4ac77aca10bfd7676557593d1204e8d07161bbd54b8b26719ccc12d8ef909ae497347eefab0b68378a7b70d216e84b4f92f30e06037115b785925923db0ceda5b21f2113b236fc7806fcb90ee5758607506a85fc3c143665de9f4fc8369702ca52fbd7d3cdc0f48504b26b8d59dd93e744ee71c08ddce8e0d137062b8dda8f3fea311ba544e693bdb57eefb52f10e6f6ecfad1c9da8b3e32db483b0459c99063054edf3eb43250aa0eb701944fe764935642f88b016897ac0006c8f0d8568361a7c"}}, &(0x7f0000000b40)={0x0, 0x3, 0x70, @string={0x70, 0x3, "fa3d92203eb17fb5a968b097417f5fcda57d055f0d5d007425c4ff1526d688dc5b62703039607a4fcf82e67b0f79b79dccc496dbbecc81d743205079e396c7bc1fbaffad48b4e0442cf9d405c44bde53c60c3f01587874a631a028cfcb61263237a027d84544ee8651ac576a99c8"}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000c00)={0x60, 0x6, 0x7d, "bebac71471b1888c3ad28564c153c2266ae592eeb5f674e40907c3ff8460ef87bf3b0cfe8de75c766e74ab5b8de13218980629eaa51f3b70aa5aa0c41ba543e561ab3bc39faef9e0626715e14f7db681fa99a607ad863eba39f1a98f225d6dcba1101c72e6a66e39c19b653f85fb434b3a2961ef5a8da50033fd6dc89a"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x57}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d40)={0x20, 0x81, 0x2, "5ed9"}, &(0x7f0000000d80)={0x20, 0x82, 0x1, '+'}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, "9ba4"}, &(0x7f0000000e00)={0x20, 0x84, 0x1, 'k'}, &(0x7f0000000e40)={0x20, 0x85, 0x3, "bfaeb7"}}) r5 = fcntl$getown(r3, 0x9) syz_open_procfs$pagemap(r5, &(0x7f0000000180)) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 6: socketpair(0x2c, 0x3, 0x4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x800) r2 = userfaultfd(0x80001) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000440)={0x1, 0xf7, 0x2002, &(0x7f0000000400)={0x1e, "6624b1178a476c435fab7eef7341dd6df66b398ced868b016927586facee682813"}}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000090605000000000000000000020008000900020073797a3000000000300007801800018014000240fc0100000000000000000000000000010c00028008000140ac1414aa08000a4000000001050001000700000006bcdb82fd76e7ca077db258be2aaec6d48af4690c63d052717212e8cb4f10bb3f7175c78ffaef637ea2bb4655c457b9446b940613cf937cffa5a13739043166a410dab6088001d77b4ac3aa2547f7c53c5f068bca8b58b4950a620000000000f308ed577654f8dae9e0c0eb7d2a84bcacea6bc22cab4879ee7a861033a533289506f22e85e09345b4230453b64611aaba77ae5e70751d98b01b9d3906e8ad578107d04335ff9fcea7f46de3eff70d71fa9d6e45644e55949fed2ca8e504902ce63f224f985419b5a5bb79e9c7192b05911ebe4908db6911c3700f6f28a891df400441e6ddd2ed391d544bba5c"], 0x58}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) executing program 6: timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mknod(0x0, 0x1000, 0x2b6) executing program 6: socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xffffffff, 0x2, 0x4, 0xffff, 0x11, "00625c353fe47f635e000000000000de006324"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = socket$kcm(0x2, 0x0, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007200000000000000300e1ffdc0000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r3 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 34: socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xffffffff, 0x2, 0x4, 0xffff, 0x11, "00625c353fe47f635e000000000000de006324"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = socket$kcm(0x2, 0x0, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007200000000000000300e1ffdc0000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r3 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x44844) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2800) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0), &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_ublk_add_dev(r6, r4, r7, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3900, 0x80, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x3, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}}) executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x3, 0x0, &(0x7f0000000240)=[{0x10, 0x1000}, {0x1, 0x9}, {0x80, 0x1}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0xd9, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) sendto(r2, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x4010, 0x0, 0x0) executing program 4: fsopen(&(0x7f0000000480)='qnx4\x00', 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xfd, 0x6, 0x0, 0x0, @mcast1, @remote, 0x7, 0x7800, 0x2}}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) executing program 4: socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x40000009, @local, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0xb, 0x1, "ae8815b85b08b9e1093366dc41e523de997347ff2468e2d38dce9f848654c1c8", 0x31303553}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x80c1) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000680)={0x28, 0x2, 0x0, r1, &(0x7f0000000440)="a4a9db6a2635b50015e7554b8a4362669eab3447bf5f80e7ae9b1a4f6920e68ec2eed34d2c9a7b8c5c9dd2", 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x4}}, 0x1) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000002c0)={0x4, 0xe}) (async) syz_ublk_setup_queues(r1, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x259}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10010004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79c3, 0x1, 0xfffffffe, 0x20000ad, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f43, 0x100, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000200000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000ffffffff00000080560000000000000000000000fcffffff00000000000000000000000010000000090000000800000000000000000000000a001e000e0000000000000048"], 0x138}}, 0x40000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r11, 0x40047451, &(0x7f0000000200)=0x8) (async) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r12, 0x40246f4c, &(0x7f0000000280)={0x30a32c0, 0x1, @qpsk={0xfffffffa, 0x20}}) (async) close_range(r10, 0xffffffffffffffff, 0x0) r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r14, 0x4008ae93, &(0x7f0000000040)=0x1000) (async) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r14, 0xae80, 0x0) executing program 35: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0xb, 0x1, "ae8815b85b08b9e1093366dc41e523de997347ff2468e2d38dce9f848654c1c8", 0x31303553}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x80c1) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000680)={0x28, 0x2, 0x0, r1, &(0x7f0000000440)="a4a9db6a2635b50015e7554b8a4362669eab3447bf5f80e7ae9b1a4f6920e68ec2eed34d2c9a7b8c5c9dd2", 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x4}}, 0x1) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000002c0)={0x4, 0xe}) (async) syz_ublk_setup_queues(r1, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x259}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10010004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79c3, 0x1, 0xfffffffe, 0x20000ad, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f43, 0x100, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000200000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000ffffffff00000080560000000000000000000000fcffffff00000000000000000000000010000000090000000800000000000000000000000a001e000e0000000000000048"], 0x138}}, 0x40000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r11, 0x40047451, &(0x7f0000000200)=0x8) (async) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r12, 0x40246f4c, &(0x7f0000000280)={0x30a32c0, 0x1, @qpsk={0xfffffffa, 0x20}}) (async) close_range(r10, 0xffffffffffffffff, 0x0) r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r14, 0x4008ae93, &(0x7f0000000040)=0x1000) (async) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r14, 0xae80, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000800), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060100000000000000000000000000000000000000000000000c00030064756d6d79300000100012000a00010064756d6d7900000008001f0002000000"], 0x44}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000800), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r3, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c00020008000a00e8030000"], 0x3c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') executing program 2: r0 = userfaultfd(0x80001) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x10, 0x5, 0x9, {{0xf, 0x4, 0x2, 0x3, 0x3c, 0x66, 0x0, 0x1b, 0x4, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0xf, 0xb9, [@local, @dev={0xac, 0x14, 0x14, 0x43}, @local]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x120}, {@remote, 0x85b8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x8000, 0xcab90aa19fdc416c, 0x1, 0x0, {{0x3a, 0x4, 0x1, 0x8, 0xe8, 0x66, 0x0, 0x34, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, {[@cipso={0x86, 0xa, 0x1, [{0x7, 0x4, "47f3"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0x45, [@private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @empty, @private=0xa010101, @local, @multicast2, @broadcast]}, @rr={0x7, 0x2b, 0xb1, [@empty, @private=0xa010101, @empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast1]}, @cipso={0x86, 0x6d, 0x3, [{0x2, 0x9, "a39a786aeb7cdb"}, {0x7, 0x6, '{V\nn'}, {0x7, 0xa, "7726d9f156f4ed22"}, {0x5, 0x12, "13348927b5cbcc4080b510c958e55c4b"}, {0x3, 0x9, "ff3bfd855da9ac"}, {0x0, 0xc, "bf2646a462bafe18f90b"}, {0x5, 0xa, "7eab7560c3889e86"}, {0x6, 0xd, "2312c163c3b82ae305b839"}, {0x7, 0x10, "f29bfc6ea7b6a5c7592ec3e9e637"}]}, @end]}}}}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x76c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c0001800600060088", @ANYRESOCT=r5, @ANYRES16=r5], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x957f9ede9b3531f4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x8, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc7, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="9a10d802e940", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb5, 0x0, 0x0, 0xfb, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x5, 0x9, "04180226077710"}, {0x7, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x2, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "499cd940d3"}}}}}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) fadvise64(r0, 0x8000000000000000, 0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000041000100fcff0700040000000100000004004880180001801400108010000b8008000100ac1414bb0400368008000200"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x3a, &(0x7f0000000000)=""/58, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x1}, r7) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f0000000580)={{0x3, 0x3, 0x1, 0x1, 0x955}, 0x0, 0x40c, 0x400004}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES16=r2, @ANYBLOB="cf0401004000ffffffff0801a9125427c0d9", @ANYBLOB="d977c58c85e9fe454b796da1946cd90e0f26bee4ee6ce2c5c78ffbb2e03a2e40849feacf32f55ac1f94e7546e6c41399f1070dc70a9324d5f0e19d17c9c13e2da976a5f00e095dbbed591a3f3f6b5f5c736e8e55c3ff7c085ad658bb522d1320ed1f378649d5e083f1f57890f0dc1195171cba9435b5d65460412effcf4c5b8467d57a1f667b720376855362f9b1c54a3bf5c096a6f1d2b18d377bd576d64cd7ff6c23cc8059e96a054cc4349eca6453655904be744fe3195bfde0e0c446eaf091528114b692890989baa155aae0366faeb2e7368ddcae991c46812e53d8ed3b6edd7433757b660e0f", @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES16=r7, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x48, 0x3, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x8}, @TCA_FQ_CODEL_FLOWS={0x0, 0x5, 0xcff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x80}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r4, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r6, r5}}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x270bd26, 0xfffffffe, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x2000c044}, 0x20000114) fcntl$getown(r4, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x9}}, 0x14}}, 0x4004804) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="00022dbd7000fddbdf25090000002000068005000200080000001400040000000000000000000000ffffac1414aa"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0xd71a, 0x4) r11 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r11, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) r2 = socket(0x3, 0x80000, 0x100) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da933b3efe8000000000000084d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x808, [{{0x9, 0x2, 0xfffffcf9}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a000100250007001d0000bec9a4269e40e8ecd4daa45cb12963b0265dff35a83bb93210f0a4c38bea4749967310fcc42c40502b92afb0955178f1e8a21d106130663e5cda63e23b2d6763d8a05bcc1750f7"], 0x1c}}, 0x20002000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000540)={0x1, 0x9}, 0x8) (async) close(0x3) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r8) (async) syz_clone3(&(0x7f0000000900)={0x100801000, 0x0, &(0x7f0000000600), &(0x7f0000000640), {0x2f}, &(0x7f00000007c0)=""/150, 0x96, &(0x7f0000000580)=""/65, &(0x7f0000000500)=[r8], 0x1, {r5}}, 0x58) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 36: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) r2 = socket(0x3, 0x80000, 0x100) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da933b3efe8000000000000084d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x808, [{{0x9, 0x2, 0xfffffcf9}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a000100250007001d0000bec9a4269e40e8ecd4daa45cb12963b0265dff35a83bb93210f0a4c38bea4749967310fcc42c40502b92afb0955178f1e8a21d106130663e5cda63e23b2d6763d8a05bcc1750f7"], 0x1c}}, 0x20002000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000540)={0x1, 0x9}, 0x8) (async) close(0x3) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r8) (async) syz_clone3(&(0x7f0000000900)={0x100801000, 0x0, &(0x7f0000000600), &(0x7f0000000640), {0x2f}, &(0x7f00000007c0)=""/150, 0x96, &(0x7f0000000580)=""/65, &(0x7f0000000500)=[r8], 0x1, {r5}}, 0x58) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 7: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xd1, 0x0, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) unshare(0x26020480) unshare(0x0) sendfile(r0, r0, &(0x7f0000000040)=0xfffffffffffffff8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x18) executing program 7: socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001efdd00000004000000083bf574df075806fcbe6555976fc440c7e3b10ae01286e446b10071860bfcb44257c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') write$eventfd(r2, 0x0, 0x0) io_uring_setup(0x43e8, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0xe}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_ACT={0x8c, 0x2, [@m_ife={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xba5}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x45a291d9}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x8000}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4048051}, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0xfffffffffffffd88) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2d8) inotify_init1(0x80800) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x841d, 0xa005, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x8f, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000501000/0x2000)=nil, 0x2000, 0xb635773f07ebbeeb, 0x8010, r1, 0xe04c7000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) set_robust_list(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="0f20e035000200000f22e02e660ff85f0066b886008ed066cf0fc735e7ff966af3450fc7327d47bdcaca852743c7f897600000b9400101c00f32", 0x3a}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x1, 0x2, 0x80, "1e85ac2d46a76a0639eef479058be8a0215d96728b3757a8cc50e4b22fa0659c", 0x34324d59}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x13ead}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x8}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2d8) inotify_init1(0x80800) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x841d, 0xa005, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x8f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0xb635773f04ebbeed, 0x30, r1, 0xe04c9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) mprotect(&(0x7f00005f6000/0x2000)=nil, 0x2000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) set_robust_list(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="0f20e035000200000f22e02e660ff85f0066b886008ed066cf0fc735e7ff966af3450fc7327d47bdcaca852743c7f897600000b9400101c00f32", 0x3a}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) executing program 7: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) unshare(0x20000400) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getgid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xb82}}], [{@uid_eq={'uid', 0x3d, r4}}]}}) socket$inet6(0xa, 0x80003, 0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2102040c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4}]}, 0x2c}}, 0x0) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) executing program 37: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) unshare(0x20000400) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getgid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xb82}}], [{@uid_eq={'uid', 0x3d, r4}}]}}) socket$inet6(0xa, 0x80003, 0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2102040c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4}]}, 0x2c}}, 0x0) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) executing program 3: syz_usb_connect(0x4, 0xeb, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0xa7, 0xa7, 0xae, 0x8, 0x403, 0xa5ae, 0xd7b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x1, 0xc, 0xf, 0x20, 0xb, "", [{{0x9, 0x4, 0xf2, 0x9, 0x1, 0x2f, 0xbe, 0x3c, 0x3, [], [{{0x9, 0x5, 0x1f, 0x2, 0x10, 0xf, 0x3, 0x2, [@generic={0xbe, 0x21, "2e767c78cbeaab188afe5f77fc67b9120d811762736f5100ec5e968850aec5f3089520b84a46f666059c6a9ed5800faa26eb0662fabdd480cb31900b2e27ea422469d55783554b95b6856deece13f95573b72634b7f917892650ba44c0245fcb84590f218ae45ec7b8c8d395ede3b4849b8fd2d2742c5aeb24b5db823a0dee0bd01957b5b09c3315559362d274c1a2c95601347e7bf68210b5144d3885961c9e2a0a3de07d53a7b95799d1c2caef7aa27ade39fd85ca28241a3e10f5"}]}}]}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 1: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x28, &(0x7f0000000500)={[{0x24, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e26"}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x21, 0x88, {0x88, 0x9, "50b5aeab4789a74e574791cf1c4be9d38728beb6aaf9e567857682e5a75dd8f398e36e5f18866b7d68fb11b31989f5f994b624d1858e0775ffc626762ea10ae4aa67c4b38c205b4362df805093bf71a137b9b2830d29f41f132223ae2f13f87c2ce505e3bde494aa05f47d2123188a78169477e961c5b30847f6bc8ab4ee80252cbc25022817"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0x5, 0xdb, "250aab6fbbe83b1249a8c9a89d6915338ee654938cec06705d976c081bb21e544a13514a10aef382dacae3b8a3859853f5117117bc88f6493dabbecd62e4403c0aefb3d8ca4327d6e9b95e83c28f1b4fb19003ab5d09d9ae6e7face15ad761f7380d78f62957f140908a291bb05a4ea146b57385bf9c930160001fbd4e69faaa0b552e3c1749b07c421cadfc2617ff76d3d14a0de2052b2ffa053d163055c1f421c581c3871f7a904a394c077fed2093da1d90beb787ba4ee334707fc45040804c04e8465599d875eda5fa1f3f939a5535a02e0876b28085bf5b68"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x4f, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='8', 0x1) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x20, 0xe, 0x4, "87266cff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000f40)={{0x12, 0x1, 0x110, 0xf5, 0x29, 0x8b, 0x20, 0x46d, 0x92e, 0x6bbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x5, 0x20, 0x45, "", [{{0x9, 0x4, 0x65, 0x2, 0x0, 0x5f, 0xe1, 0x20, 0x5b}}, {{0x9, 0x4, 0xe, 0x3, 0x0, 0x3f, 0x1c, 0xdb, 0xb9}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x55, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000d80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x84, &(0x7f0000000a80)=@string={0x84, 0x3, "13507c4fcb7a051ddd5c329c8f7d5ce8e47cd35f47b7e45d37bd75f1c7af254ba286e61f655a4b10b633a0c74ee894646c8bfc06b1bc249e2357ec1cdbf90a98026036cb1378f6e6d3f30638161bf362503f4a6e058389c212906d70fab3387af1e48b2de580c22969bde1a286dad3b6adebe729718f5ce1ec17c110251f708a1658"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0fc1cd79"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, 0x0, 0x7fff) executing program 1: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0", @ANYRES16=r0], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r1], 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) executing program 9: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="780000001600010027bd7000ffdbdf250a3888ff", @ANYRES32=0x0, @ANYBLOB="08000900060000001400010000000000"], 0x78}, 0x1, 0xba01, 0x0, 0x40041}, 0x4048) executing program 9: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) executing program 8: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0xb, 0x4, "bd7ce6aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xe}, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x49) executing program 3: syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x10, 0x6, 0x10}}}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x458, 0x138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0xa6a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x12, 0x3}}}}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x8b, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0xf4, 0x80, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7f, 0x7f, 0x10, {0x8, 0x25, 0x1, 0x81, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x4, 0x0, 0x5, 0x9, 0xae, 0x3c}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x60, 0x4, 0x4, {0x8, 0x25, 0x1, 0x3, 0x3, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x100a}}, {0x2, &(0x7f0000000780)=@string={0x2}}, {0x0, 0x0}]}) executing program 0: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x3, 0x693, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x53, 0x73, 0xa2, 0x10, 0x5c6, 0x9215, 0x4e94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x681, 0x3, 0x6, 0xa9, 0x0, 0x4, "", [{{0x9, 0x4, 0x6d, 0x36, 0xc, 0xf2, 0xd3, 0x96, 0x8a, [], [{{0x9, 0x5, 0x4, 0x10, 0x400, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xe, 0x1, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x800}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xe5, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5e, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x80, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd2, 0xbf4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x84, 0x99, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x93, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9c, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xff00}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3df, 0x4, 0xf2, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x6b34}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x83, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8acc}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x9, 0xf7, 0x8}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x8, 0x6, 0xfd, [@generic={0x47, 0x30, "26a85be94a40d3b15eb5bba5ea89be420187cd8a96c0bb6975358de5454db16b51f4424c385f311e10ca9836fbbf0aef16aff69a3b10af61031a849a3bbd94110ad8ecc8ae"}, @generic={0xe5, 0x11, "ab2a3cc0dd315af6be4c75d02b0bca33b6f57cbab83c5409a4f041ac1f1e2e9eb2113bf28c8bc7c94a7f6b479a7fe81319948c2ffdec42aab7122e7efab098efc37e12d093a15a88633e0f4d230616b02c923fbe67a3992a01f786b50334d3571a8e8a8ecbd2c5b2fce54a889569e490b4d15e2fe38f59a6c3486e512590c81d279d69caf4b50dac18d995ef4e5c92337feb1d262f8c1b615e7cd1ae2240c883280a73a9bbd25dc5953ea7754df8630960432a27962a18c451298f4eb088da0f10995212d01e64f8cebe9c5875ef1982dc661042a1856d6a76209739ab052ea1593bb2"}]}}]}}, {{0x9, 0x4, 0xe4, 0xb, 0x4, 0x4c, 0x15, 0xed, 0xff, [@generic={0x2, 0x11}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x7, 0x9, 0x0, [@generic={0x26, 0xf, "9f13fddee7dd5c694596c2c87175c0b0a54f276b8bf4075ad38a183607aaf0845969c2d5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x80}, @generic={0x3b, 0x10, "2a1a6dadcf5b06eedeae2881cc9151a98415debcbd3522cce605bee74df4498ff88d917b221c6d3abfbdbe5b09a3abe5a1542b5b54df161913"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x1, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0xb, 0x3, 0x8}}]}}, {{0x9, 0x4, 0x72, 0xc0, 0xd, 0xff, 0xda, 0x83, 0x3, [@generic={0xa3, 0x0, "7bbb7f069d245401a9d8cd52a24e7100f691679d182c34a6ee401fae9396311cd3f0a129fa981492a760c5d24cfe6e4527a56dba4ce5869d82a5a0605c22ec3c59635f5fccaca941f0a8f0795346211aa96fffb019fca3f17a1ff593c8c4f155c96c07b47f500820904458a69ad3c00493e2308739e476bc44a9afca3dd5eec9eff93b3be953e4fbacbcaeec1fb83223b84dd86cfbdbb310fc1f36a8c6f8d89121"}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x6, 0x81, 0x6, [@generic={0x98, 0x8, "120742c6e3ed3a41acd1d135df1958859eaca7f1a18915ff6578cc826ba76fedb570fc60b2d4bd01d50edb5e3c6895caf1c470766d8dbf4b6c2119936d2cf9bf9abdca5c52ff41ecb245107cd99d311cc7f4f52865462bd5750bc4281e8d1fff46d34ffa25afb9ea12a66f60ed4d4f6002c79ff33939e77ec4027d7a32dcc2cf3da6c971fa1513d1910504094ce9fb2b8f87e98a5bc4"}, @generic={0x19, 0x22, "98c4e961f95b202efc147f9bb38802494b16ce46988158"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x30, 0x3, 0x8a, 0x6}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x34, 0x0, 0x7, [@generic={0xe7, 0xc, "a715571f7b8ab82de8cafde2f693b67c16e328e7611126abb6feee30f5d76d18c56bbbb5ddacecea155020084476529bde116c371958cc1d11d09c51e6d9c61077fbdd941ee23c3f6a997fc86f050f4dbcf84c361e01301d4c4e0e7b981a55a2662b0f1d8fd4c4905cc9e2d89ec548109ef262bb3ab29abbc5d9ec1e7ab062c2dff811ae5e4d45f16965b7206edfd6bfe3b0111064f896bfded0c3090ea7ba3156d85107bb2f23d1fd423570e1617f526450f65610e3f12849c0c508ca70ecbd6f1406ce2464f586cdf7b17efb57feca9cb1ae1d6a579db370f72e52447f68eb6b1521d3e6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8169}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x80, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x8, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x3, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x94, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6f0c}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0xf, 0x5, 0x7, [@generic={0xe3, 0x2, "e675c1b482932ccf02531d8466bc26c130ea65791b004717e48bdf3995437ce1f1436616116eef75620bcf12f8e5f46cb21641e25f6a0147fafbae6a8a9058df442594c38b4767e65f662733932eaa7f676889a2378f4da8c9de233f76ef7121af7b27c38dd4556076392652f04d2e50c4108b50b7ffbbeb09976def1cd3825ecbb563c1808a66dcf56f7fcc1a0ee1e1095363c4abed3301f796ea61cece30e7042952555218c12b004d590921ca364f4327d323f18c922f50e8d562ff88c15855afe2413a09d24a587762f74478db5477739aa28bfd6c7cd2545c8168a9a3e1a8"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xf, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xfff}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x8, 0x9, 0x9}}, {{0x9, 0x5, 0x2, 0x5, 0x10, 0x2, 0x2, 0x6, [@generic={0x26, 0x21, "a074f4fa90aef9ea77345ca3845ed2a58095f9ad06b7cad61001af389b4ea0f679f67ac2"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x9, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0xac, 0xaf}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x110, 0x6, 0xf, 0x5, 0x40, 0x7}, 0x19a, &(0x7f0000000e00)={0x5, 0xf, 0x19a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "141c08640a173794a9c21814adca5ec1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9c94522ac3051fc, 0x3, 0x4, 0x8007}, @generic={0xd7, 0x10, 0x0, "0a0bfe9e6e4c83036e9c6a523e5896d6dc0d70b811d10bb019c22ba7803a9e8b3e4d57dcc447eadf45c9968996854c70a31a6479a306ee742f1b85960ff0c85fe3328c7a14dfd0ad7d7d244d639678302631c88487e9eacac9d9945b78551c1fe0008710d00910182b86ddb3df4602a6b9b1cdf237cd1ec6ddc40f173ad001f39d6a658f362229c69ad51ea9f135fa6a9186325942ac1e50ca55bf30f8f6fbf82e1f7678f0ed52e6691517f7d78c9ebfdf67aa019272151345f38a11ba58366db060202436230dd56daef76c1d68f0e2d599054d"}, @generic={0x8f, 0x10, 0x3, "551b15e65d15c4c9c698d1b125e7f7036e7997bacc3a7aa0eb49bf00357f01fbbe04f6119f15da3a0d136d0b1b674018b0b3d9cefb527344dfeb6abef65292927c1bed0e9711d12bb0afdcea50ac967cc66749340cbf48b34979ccb4fbff2bbce494e80bf810eea575693a253421016c3683e4c3ef912b77f1483c7332db4fc9cdf8902536ddfb9e95899923"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0xfc, 0x9}]}, 0x3, [{0x2, &(0x7f0000000fc0)=@string={0x2}}, {0x0, 0x0}, {0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="dc03d9138a18894dbeb43b1254a61a81a39f9e9d80896eee0a552d4556e95ba04eb97e6b4200a3b3c028e050ea40b4d584879cac61835794902b21fd24386a09fa5302bb5aa44a0aa24f416b0c2e93b6736762501a61a20c4a43a358b1f0e0c54f29d427500aa446da23e6ebf04eb4e9d5141cdcaf3d10a060f001fdae6222933a5ee35e22542bc3f9f2b5b6adb35a110b4d206c12120b4bd5e6d4e04d132bf7c5e781c5d9cafd0fa7f13891ca45195defcfed3099c3754caa0f9d2d8e2264cf6c32a7960d6fa03ab2e692c0fac573f90f2b8132a3b77e67610f1693"]}]}) executing program 9: r0 = syz_usb_connect(0x0, 0x495, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bc6c994086124420804d0000000109028304010000000009046e0010ffffff000905081c08000902001411427e76ec46643fbcfdda95793befdb5f07b30725010189030009050400000410010524210111ea1e8faa85e2624a04551cf55bed15d172b3f0c9db2156606b688a3b475a566809050c08ff03051008072501830981001205f162e6"], 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c17a78"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="1201a5b310000000000010b2cd6edcd804dd00000038903465a8"], 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffe0, 0x8, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x81, 0x46d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x33, 0x8, 0x7443}}}}}}}}]}}, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x9, 0xd, 0xff, 0x86}, 0x0, 0x0}) syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xd7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x80, 0xfb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x7, 0x24, 0x6, 0x0, 0x0, "34a6"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x10, 0xfb}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0xc1, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1a, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x91, 0x8, 0x40}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x9, 0x0, 0x7f, 0x40, 0xfe}, 0x2c, &(0x7f0000000500)={0x5, 0xf, 0x2c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "cfc95fe56aa33301ce2d3303bfba544d"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x4, 0x8}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x81a}}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f77010000002aff0083"], 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd4, 0x24, 0xe9, 0x40, 0x1de1, 0xc102, 0xf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x5, 0x0, 0x8}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000002480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x249c, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x6, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x2, [], [{{0x9, 0x5, 0x2b9bf0ccbea08295, 0x3, 0x8, 0x7, 0x9, 0x6, {0x14, 0x25, 0x1, 0x10, "ff350ff707613403f3261fa8e7481e64"}}}]}}}}}]}}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x53, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xf7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x7, 0xd0, 0xe0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "0c2511c2b46f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x67e, 0x6, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x7, 0x21}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x7b, 0xa3}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x3, 0x6d, 0x0, 0x10, 0x87}, 0x23, &(0x7f0000000780)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "b0880d61de951a1562d4907bcee54ee8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xc0, 0x3, 0x70b}]}, 0x1, [{0xb8, &(0x7f00000007c0)=@string={0xb8, 0x3, "879109a7272ce57bd05853851699c54035105f4d236d5c276c4c66749eeccae81cd4dda10506f0eda62e3dd4d0d7244bd85eaa0c60d881416af7421226983e22120d84be6c8341cd4676158ae11dc394ff670dab11d731dd2882329f760e2271013b260ae42a8e46e49f6412565e269dbee19b10fd1ea63e51e46a88062c2310ebb79fa1f4be02d2203dade333d80f85eafeabb7c837a50107a09e3db4d4e363888bf64e426cb810f7b028e8d96219ebda7aa92d04b3"}}]}) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000000206b1d01014000010203010902a20003016440070904000000010100000a240105001b00020102112406050605010009000300030008004809040100000102000009040101010102000007240108c9011009240201053500037f11240202060009002ded7e16d4d24f629d07240108010100092402010004000603094a9be504391e533807250108066a02090402000001020000090402010101020000090582090800050c0b0900000000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf8, 0x8, 0x9b, 0xff, 0x82}, 0x3c, &(0x7f0000000100)={0x5, 0xf, 0x3c, 0x2, [@generic={0x30, 0x10, 0x4, "4ed14aeec61501b4f4a5c9707bc19f507c475cd7962a50a019c05a8b36d492b1824043e2db09fb4bf8c610a91d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x9}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "a6ab29f8d20ea02d0713c608b86bd52001ff3d01d1da0ea0a77fdbd56e21f92672411aff4da4192ec37222b0f9c658be98b8199de7aa4cf4ce21a159f9a104b9cd6728028a266c9866be2a7f6be28197650dc10677a012061195e48821da37820a73fd18dc9055e35f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}, {0xcb, &(0x7f0000000300)=ANY=[@ANYBLOB="cb0319e4cab1d0e5b8bba990244edf1c95a9b908f08389685e84eb100f4ecb4715879f435724e26fe42f277e6417b04310d92f29efc809fcdb2bcbe06926f25c42491a817437f0f813d9e465a1306fe22c3078df94784f7dd6d860fca16648c5951486e37c4015bef3870c5fb5756941d89ed846dafe27d400c2409e4e23bbb1a8140a6101720353f0d2b4e361a09c0f2905003684adfe8da503afc85c25a063b500bba555ef61bc0264cf9875a479b50fbe53bdcc43d0fe1b00"/199]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x421}}]}) executing program 3: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) executing program 8: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hidraw(0x0, 0x2d, 0x311000) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, 0x0}, {0x0, 0x0}, {0x2, 0x0}]}) executing program 0: r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x41, &(0x7f00000000c0)="04d4344290f1e1229a1d2ea9db24537a76c4cf14cdb65c7872f295eeebda28aca7f583802431ffffffffffffff7f8f17fb99d7cda1fdf4378746470f7de2216a09") executing program 1: r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x20, 0xc, 0x2, "5da8"}, 0x0, 0x0}) executing program 9: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000140190933334000000000010902"], 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000980)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x2, 0x0, 0x7, 0x20, 0x5}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0xc, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x40, 0xf00, 0x7, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x2, 0x4}]}}) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) r3 = syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000000)=ANY=[@ANYBLOB="a6010003020000202505a1a4400001020301090265000101"], 0x0) read$char_usb(r1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000440)=ANY=[@ANYBLOB]}, &(0x7f0000000780)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="401607000000e9c9159ff2fa43db26ee6da88c"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)=ANY=[@ANYBLOB="20448e0c0de2d2282c"], &(0x7f0000000680)=ANY=[@ANYBLOB="1f820200"], &(0x7f00000006c0)={0x20, 0x83, 0x2, "c40f"}, &(0x7f0000000580)=ANY=[@ANYBLOB="2084020000fd"], &(0x7f0000000740)={0x20, 0x85, 0x3, "47e3cb"}}) syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201500bc534a1901700e1ae4db90200000020da0b144040000102030109027e0003010100070904000000010100000a2401050028000201020924060405011e3602000509240302030401040a0c240205000401f73b0deb0909040100000102000009040101010102000009050109000240067f07250100fd82030904020000010200000904020101010200"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(0x0, 0x5, 0x48000) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000080)=""/78) syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[], 0x0) executing program 8: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xed81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xffbe, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x5a, 0x60}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x48000) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x34, r5, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x14084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x42, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="780000001600010027bd7000ffdbdf250a3888ff", @ANYRES32=0x0, @ANYBLOB="080009000600000014000100000000000000000000000000000000013c0002"], 0x78}, 0x1, 0xba01, 0x0, 0x40041}, 0x4048) executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 8: syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) executing program 9: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x21, 0x57, 0xd1, 0x10, 0x547, 0x6801, 0xf370, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0x16, 0xef, 0x0, 0x92, 0xa2, 0xa3, 0x5}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfad, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7, 0x3, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x2, 0x2, {0x7, 0x25, 0x1, 0x4, 0x7, 0x3df}}}}}}}}]}}, 0x0) executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0xc, {0xc, 0x21, "74a73178a5d7be108a90"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r2, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x21, 0xcc, {0xcc, 0x21, "ee7dba6a855c521115b53f80592c5dfa6a31c54b9dd533559c06cc4d4623f7867d328bc97c5c8dc6f869e14c6894bd7bf5bf384af72b52ee05e9f2e11214161d741bf704aa70d5ea0e0516403f569220770d9a876d9009c9ab9a042b3a75dd78a5d4a5fb8ab8415263d0a15ba1eed87c0644ccac8d8fcd4332afbad5357261cdb19ec541ae7ead555a9d5d869919def614adff7c1f544333e02febdd5e8502e4dbfa80c838fdb1ae40a3b253362e667e9c291e29ad725912a24682de066f2b3faea9d1f5829ca964f0c5"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f00000008c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "3a9719f53b8d75a99f69870a843fead6"}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x8, 0x2, 0x8, "34dead56", 'pkz6'}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x4, 0xf7, 0x4, 0x5, 0xfff4}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x20, 0x12, 0xad, "00e7a3cd1a5b53b5320059e6a81a92ce4e2805a6082592b3d8b3c0cffa987ef13665f03fc40c38bdd9b3a93a7bcd423be4a451f68f6b6a8756724563376d7805746117eca34816c437224b205148e534283228ebf81e4d94332a2d6a553cff58ef630426654bc09276ea8a35a8ee23103df921d45295ee84cdf216178ec7a638558b23ef9eae039dbad553c4937dad0e8b0055a469bafb65f0cf8378ef67200f864022ea44d3a6361af28ccad1"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x9eca}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "fdbf"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @random="5c13417e4714"}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a46b"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x15}, 0x0, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000e00)={0x40, 0x21, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000f40)={0x14, &(0x7f0000000640)={0x20, 0x24, 0x48, {0x48, 0xc, "848259e7c7151c6aaf4483d60cc2f057d724ee3f411625283512335afa4b45a743e3fcc8bd691e383280957b56ea0fda11c0ecb8519b3f96243ad42999edb69ff6794e1fa6c5"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001140)={0x34, &(0x7f0000000f80)={0x20, 0x30, 0x44, "1f7058b1f469aa697912462920d576013aed7c54d0e9c1f2fa794ed3bcb5afee4b458adb875102df1eb723882aeb6a53c6f7a4a204c4d72b62da9c159f034d3a22f6fb47"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001080)={0xc0, 0xa1, 0x4, 0xb9}, &(0x7f00000010c0)={0x40, 0xa0, 0x4, 0x1f5}, &(0x7f0000001100)={0xc0, 0xa2, 0x2f, "60aaf23e67476f0c7e2c2944f1db0dce7973b80bdf93c51760ebc8c475051e819398a19da268b8a04e08e5e6f23c1f"}}) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000080)="0220") syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x150d67b335ed1332, 0x4b3, 0x3109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x93, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xce6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfe, 0x9, 0xc}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5e, 0x1, 0x76, 0x10, 0x4}, 0x3e, &(0x7f00000005c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x78, "ec51d279949d4e25498e61b1bd9d17a9"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x8, 0xe7f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "07f7a3309fec3c13ef8993099baf2e43"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x9, 0x5, 0xc7af}]}, 0x2, [{0x28, &(0x7f0000000600)=@string={0x28, 0x3, "4a17a9937ddc1e982b5ff2c0c61e467f885385ac7f14fa9ea2d155492530509dc11557964701"}}, {0x77, &(0x7f0000000700)=@string={0x77, 0x3, "741ef0769a6dbc94f464694d24f3e41f5cbd710185e4730c63f9b1f0372a3085912964ba11296f6e33d914ffa17496dd60a04308a1bffac946af86c9648bab8b0a5144c5fd819bed3d02f92c46fa2fd01181884e0662e90a278bf8a104f6235ae66b1d94316d90e4d53aef543c173483de41f6cc49"}}]}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xb, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x0, 0x22, 0xbf, {0xbf, 0x22, "07d9537b4a07d3ba4f256bd8b4fde8dc7e8a1f43c6dd7e7549850b4113b34ed4ae098c41b68f4391e52f0e5f5c2f4e1ff3d42a80c037da518713dac51b8778e4cfd8a122ecbabab41f6519bf4c2924386c9e389b68c7ae540286f742b045d6f3cc95d2a9a21b53bd47f4ccb330c48928c22a375fdeb4c1f2035b6980890e656a56599d541f1834009b53adfdbae03aaa2ef1c9e4b8e00f06db6e7f5264329f9c57794b13f37cef6ca1e822a54fe2227af57895d6260a27cde857422cd3"}}, &(0x7f0000000200)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "dc179d8f05a1d901fe972d3fd31ee57bc797a4f131b95a784ea84a833abd2f2886c375dd4e97645389a9757d9ff383182080f3d4740f1c04c094e416b8727098521fabb0cf8bc2c6f7074a0675c72434309097d2d51070d7ddfd2a4fb85f9ba04fc43c293d9a6ba0bf488ef1bb46b78b2b6a9b5bfea7d78568faf540cd4caa051f815fae65189c85f8a70bc5ce475fb2e0a4b8c116fe912a4244e859f3a7a3ce1647d0293e46a4d1ff878dcead3526b71fdfa47b6aa2e7009e1a9ab9e54c4aeddb8e31d77bc1a3e3d1ca5994c5c4ad035cd3a6fd9d37fde97a665b7d12e5e7dc4ebe"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x40, 0x9, 0x9, "a78280c7adf3e13a44"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "36d0cef372155303647b3dab9931b5b585f04b85be6f6b370d7cfaf35caa875bab08aa5a36cfb608e4fd4730472075"}}) executing program 8: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000062a10b40450c101003000102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000840)='3', 0x1) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000200)={{0x1, 0x200, 0x400, 0x800, 0xfffffff9, 0x4}, 0xa7, [0x5, 0x8, 0x0, 0x9, 0x3, 0x10001, 0x4b, 0x6, 0x401, 0x7, 0xa64, 0x5a, 0x135, 0x40, 0x1c83, 0x400, 0x0, 0xfe5, 0x8000, 0x0, 0x2c, 0xa, 0xfffffffe, 0xfffff2eb, 0x6, 0x1, 0x1, 0x5, 0x7, 0x7ff, 0x3, 0x0, 0x6, 0x5, 0x1, 0x4, 0x5, 0x8000, 0x1, 0x2, 0x1, 0x9fb6, 0x1, 0x6, 0x7, 0x2, 0x5, 0x1, 0x3, 0x5eb, 0x5, 0x0, 0x0, 0xfff, 0x3815, 0x7, 0x45, 0xfeb4, 0x3, 0x2, 0x0, 0x8, 0x7, 0x7d8, 0x6, 0x7620, 0x2, 0x7, 0x3, 0x5, 0x80000001, 0x3, 0x9, 0xee8, 0xf17, 0x3, 0x7, 0x81, 0x3, 0x0, 0xff, 0x2, 0x7f, 0xffff, 0x7, 0x401, 0xffff, 0x5, 0x6, 0x1000, 0x7fffffff, 0xf, 0x7, 0x7, 0x0, 0x8a, 0x8, 0x6599ae0, 0x0, 0x100, 0x7, 0x7, 0x3, 0x3, 0x7fff, 0x5, 0x3, 0xe, 0x3, 0xfffffffb, 0x1ff, 0x5, 0x8, 0xffffa352, 0x0, 0x0, 0xe6ea756, 0x0, 0xf90, 0x6, 0x2, 0x6120, 0x3, 0x40, 0x4, 0x1, 0x1, 0x6, 0x3, 0x3, 0x7, 0xffff, 0x8001, 0xfffffffc, 0x6a2c, 0x0, 0x9, 0x7, 0x2, 0xa6, 0x3, 0x1, 0x9, 0x4, 0x9, 0x5, 0xfffffffe, 0x2, 0x2, 0x6, 0x7, 0xffffff2a, 0x10000, 0x9, 0x25cfd110, 0x8001, 0x6, 0xe, 0x9, 0x9, 0x8001, 0x5, 0x9, 0x8000, 0x8, 0xfffeffff, 0x7, 0x7, 0x401, 0x2, 0x4, 0x5, 0x0, 0x5, 0x800, 0x4, 0xfffff37d, 0xa8b, 0x9, 0xf3c, 0x10001, 0x4f475145, 0x6, 0x400, 0x9, 0x2, 0xf, 0xfffffff8, 0x8, 0x9, 0xfffff1ca, 0x8, 0x3ff, 0x4, 0xffffffff, 0x2, 0x9, 0x80, 0x7, 0x1ff, 0x0, 0x2, 0x7, 0x9, 0x100, 0x6, 0x8, 0x0, 0x5, 0x7fff, 0x0, 0x9, 0x0, 0x101, 0xae, 0x80, 0x8, 0x0, 0x7, 0x1064, 0x8, 0x5, 0x2, 0x40, 0x1, 0x7, 0x10000, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x9, 0xb, 0xe6, 0x6, 0xb2b, 0x1, 0xfb, 0x8001, 0x8, 0x4, 0x15280000, 0x4, 0x5, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x1, 0xfffffffb, 0x91fc, 0x5, 0xf78, 0x7, 0x5, 0x8000, 0x2, 0x6, 0x80000000, 0x1000, 0xadda, 0x8, 0x9, 0x8, 0x0, 0x6, 0x1, 0x4, 0x2, 0x9, 0x400, 0x8, 0xfffffffc, 0x2, 0x7ff, 0x7fff, 0x7ff, 0x5, 0x6, 0x0, 0x3, 0x7b8, 0x6, 0x6, 0x78e, 0x1, 0xb, 0x9, 0x0, 0xfffffff7, 0x0, 0x7, 0xb, 0x800, 0x6, 0xffff7fff, 0x401, 0x5, 0x71389031, 0x7, 0xc, 0xc, 0x0, 0xda, 0x2, 0xe, 0x5, 0x9, 0x10000, 0xb, 0x39, 0x9, 0x3, 0x2, 0x8001, 0x9, 0x9, 0xffffffff, 0x8, 0x9, 0xe2, 0x80000001, 0xb36, 0x4a24, 0xf, 0x5d, 0xb, 0x8, 0x1, 0x7, 0xff, 0x1, 0x8, 0x2, 0x2, 0xff, 0x9, 0xc194, 0x2, 0x81, 0x5, 0x1, 0x26df1695, 0x7, 0x6, 0x1ff, 0x1, 0x1, 0x5, 0x6, 0x2, 0x0, 0x1624, 0x9, 0x0, 0x1, 0x4, 0xd6, 0x200, 0xa, 0x4, 0x7f, 0x0, 0xbf, 0x2, 0x401, 0x4, 0x5, 0x80000001, 0x4, 0xd16, 0x4, 0x5, 0x5, 0x5, 0x80000000, 0x2, 0x3ff, 0x1, 0x8000, 0x8, 0x3, 0xdca1, 0x7, 0x8, 0x8, 0x4bac, 0x3, 0xee, 0x1ffe000, 0x7f, 0x9, 0x58, 0x101, 0x4, 0x3, 0x4, 0x6, 0x200, 0x0, 0xfffffff8, 0x7, 0x1ff, 0xe, 0x15bc, 0x80d, 0x3, 0x2, 0x5, 0x4, 0x80000000, 0x9, 0x80, 0x4f0f, 0x71, 0x9, 0x3ad5, 0x5, 0x0, 0x8, 0x0, 0x1, 0x3, 0x7, 0xb7f, 0x8, 0x6, 0x7, 0xa454, 0x10000, 0x2, 0x9, 0x4, 0x9, 0xc524, 0x3c, 0x5, 0x6, 0x9397, 0x6, 0x101, 0x800, 0x54, 0x1, 0x7, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x5, 0x9, 0x5, 0x0, 0xd3ef, 0xd, 0xfffffffd, 0x7, 0x4, 0x4, 0x3, 0xb, 0x5, 0x3, 0x0, 0xe0, 0xfffffffe, 0x6, 0x1000, 0xffffff1d, 0x4, 0x9, 0x3, 0x10, 0xcbb, 0x200, 0x8, 0x4, 0xb, 0x7, 0xd1, 0x21e456d6, 0x401, 0xd, 0x9, 0x10000, 0x9, 0xa3e8, 0xe6f, 0x6, 0xc02, 0xe, 0x4, 0x2, 0x10, 0x1, 0x80000001, 0x4, 0x100, 0x7ff, 0x3, 0x7bd7, 0x4, 0x10, 0xf77c, 0x80000001, 0xe, 0x400, 0x3, 0x101, 0x8, 0x0, 0x10000, 0x5, 0x4, 0x3ff, 0x2, 0xc986, 0x6, 0xfc8c, 0x8c, 0x8000, 0x4f19, 0x0, 0xffff, 0x401, 0x0, 0x7, 0x1, 0x52, 0x3a81, 0xe, 0x3, 0x9, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8, 0x5, 0x81, 0x9, 0x7, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x6, 0x7, 0x5, 0x3, 0x2, 0x7fffffff, 0x3, 0x401, 0xc5, 0x7, 0xe, 0x3, 0xff, 0x9, 0x5f08, 0x2, 0x8, 0x2, 0x4, 0x6, 0x976, 0x7ff, 0x0, 0x8, 0x8, 0x0, 0xbe6, 0x9, 0xbf68, 0x3ff, 0x3, 0x1, 0x3, 0xfff, 0x1, 0x669f1a78, 0x5, 0x3, 0x0, 0x1000, 0x84d, 0x3, 0xfff, 0x7, 0x3de, 0x4, 0x7fffffff, 0x5, 0x3, 0x8, 0x2830589f, 0x6, 0x0, 0x51d, 0x8, 0x7fff, 0xdf9, 0x6, 0x7fffffff, 0x80000000, 0x0, 0x7ff, 0x2, 0x1, 0x1, 0x639000, 0x121d, 0xe9, 0x7fff, 0x7fff, 0xf, 0xffff, 0x9, 0x2, 0x8, 0x6, 0xb, 0x9, 0x3, 0x5, 0x1000, 0x7, 0x0, 0x9f49, 0x8, 0x7fff, 0x2, 0x7b, 0xa60, 0x3cda, 0x4, 0x8, 0xc, 0x2, 0x9, 0xe, 0x5, 0xc, 0x7, 0x2a2, 0x7, 0x101, 0x6000000, 0x1, 0x0, 0xfff, 0x0, 0x400, 0xc5b1, 0x79, 0x1, 0x2, 0x3, 0x2, 0x6, 0x18, 0x3, 0x5, 0x101, 0x5, 0x27e, 0x9, 0x0, 0x25dc, 0x7, 0x154a8000, 0x10000, 0x80000000, 0x4, 0x1, 0x7, 0xff, 0x4, 0x0, 0x1, 0x101, 0x7, 0xd, 0x2, 0x0, 0x7fffffff, 0x2, 0x6, 0x6, 0x48000, 0x2, 0x0, 0x5, 0x5, 0x5, 0x4, 0x1, 0x80, 0x405, 0x7ff, 0x9, 0x7, 0x3, 0x4, 0xba, 0x4, 0xa, 0x5182, 0x6aef, 0x1, 0x9, 0x3, 0x80, 0xe, 0x6, 0x100, 0x42c, 0x2f8, 0x1, 0x7, 0x2, 0x498c, 0x8, 0xd63d, 0x3, 0x3ff, 0x9, 0x4, 0x3, 0xffffffff, 0x9, 0xffff, 0x4, 0x0, 0x1, 0x6, 0x6, 0x5, 0x4, 0x7, 0x1000, 0x1, 0x8001, 0x5, 0x7, 0xf, 0x7, 0x7fffffff, 0x4, 0x55, 0xb4, 0x1, 0x2, 0xffff, 0xb, 0x80000001, 0x3ff, 0x1000, 0x7, 0x54, 0x5, 0x7, 0x2, 0x2d6, 0xca4, 0x5, 0x3, 0x5, 0x3, 0x10001, 0xd646, 0x3, 0xffffffff, 0x65, 0x2, 0x70000000, 0x67c, 0x3, 0x3, 0xfffffff7, 0x8001, 0x80000000, 0xeb, 0x800, 0x81, 0x7, 0x2, 0xa55, 0xe, 0x6, 0xd0000, 0xfffffffe, 0xedd, 0xffff, 0x7, 0x40, 0x2, 0x4, 0x7fffffff, 0x9, 0x4, 0xc, 0xc356, 0x8, 0x9, 0xfffffff8, 0xafe, 0x2, 0x7, 0x7ff, 0xa5, 0x4, 0x7ff, 0x6, 0x6, 0x6, 0x1, 0x101, 0x1, 0xfffffffa, 0x7, 0x9, 0x5, 0xd, 0x29a2, 0xc5, 0x5, 0x3, 0x8, 0x28, 0xa3a9, 0x4, 0x400, 0x873, 0x3, 0xfffffffe, 0x1, 0x2, 0x7, 0x2, 0x0, 0xffffffff, 0x81, 0xfffffff9, 0x4, 0x7, 0x6, 0x4, 0x2, 0x10, 0x0, 0x9, 0xf67, 0x6, 0x9, 0x0, 0xffffffff, 0x7, 0x4, 0x3, 0x1cb, 0xffffa34d, 0x8, 0x4, 0x4b00, 0x478, 0x2cd1, 0x4, 0x1000, 0xf, 0x7d12, 0x5, 0x9615, 0x7, 0x1, 0x4, 0x0, 0x3ff, 0x6, 0x3, 0x7ff, 0x7fff, 0x25, 0x3, 0x200, 0xf, 0x3ff, 0x10000, 0x0, 0x5, 0x8, 0x1000, 0x5, 0x5, 0x29, 0x1, 0x5, 0x7, 0x5, 0x0, 0x1, 0x9, 0x3, 0xffffff55, 0x3, 0xf, 0x5, 0x300, 0x5, 0x8, 0x9, 0x6, 0x7, 0x3, 0x6db9, 0x4, 0x7685, 0xfffffff9, 0x4, 0x5, 0xfff, 0xe, 0x3, 0x2, 0xfff, 0x7ff, 0x206, 0x5, 0x6b1f, 0x3, 0x8, 0x8001, 0x9, 0xb, 0x5, 0x5, 0x2, 0x857, 0x2, 0x6, 0x800000, 0x0, 0xfffffffa, 0x2, 0x8, 0x7, 0x9, 0x3, 0x9, 0x7, 0xa, 0x3, 0xef, 0x0, 0x2e, 0x1ff, 0x4, 0x3, 0x5, 0x200, 0xae1, 0x8, 0x3, 0x4, 0x9, 0x6, 0x5102, 0xbd, 0x100, 0xfffff000, 0xd645, 0xb, 0x400, 0x3, 0x0, 0xe, 0xfffff800, 0x40, 0x76, 0x0, 0xb811, 0x1, 0x1, 0x80, 0x8, 0x29ce7b65, 0xe111c07, 0x3, 0x7, 0x1, 0x6, 0xccc1, 0x9, 0x4, 0x9, 0x401, 0x8, 0x4, 0x6, 0x100, 0x2, 0x1ff, 0x8, 0x7, 0x9, 0x1, 0x5, 0x80000001, 0x5, 0x5, 0x84000000, 0x5, 0x5, 0x3, 0x6, 0x2, 0x3, 0x3]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000640)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x43, &(0x7f00000004c0)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000001340)=ANY=[@ANYBLOB="400f000000001fb72a9be24369a6d5f9bcd7131df8dbe43c08c95a50df63cf585e698ac9b907f24324b565c513a8e3d9d72839195fe429e4f50e94c3819f8789f679f63507261171765b70e279b44cd8299efad663e0c3e582a129fc409faca5a0ef4f81bd62ffc69143c7c780fea4a0dcbbed0f320ff1224922ee985c9cddb1b6ce3225b78b137024828b5ab38f0b3f0e87"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) executing program 9: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x3}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0xa005, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash replaying the whole log did not cause a kernel crash single: executing 16 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm detailed listing: executing program 0: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x3}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0xa005, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_open_dev$char_usb-write$char_usb-syz_usb_connect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-ioctl$HIDIOCGUSAGES-syz_usb_control_io-syz_open_dev$hiddev-ioctl$HIDIOCGUSAGE-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_usb_control_io$uac2-syz_open_dev$char_usb-syz_usb_control_io$lan78xx detailed listing: executing program 0: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000062a10b40450c101003000102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000840)='3', 0x1) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000200)={{0x1, 0x200, 0x400, 0x800, 0xfffffff9, 0x4}, 0xa7, [0x5, 0x8, 0x0, 0x9, 0x3, 0x10001, 0x4b, 0x6, 0x401, 0x7, 0xa64, 0x5a, 0x135, 0x40, 0x1c83, 0x400, 0x0, 0xfe5, 0x8000, 0x0, 0x2c, 0xa, 0xfffffffe, 0xfffff2eb, 0x6, 0x1, 0x1, 0x5, 0x7, 0x7ff, 0x3, 0x0, 0x6, 0x5, 0x1, 0x4, 0x5, 0x8000, 0x1, 0x2, 0x1, 0x9fb6, 0x1, 0x6, 0x7, 0x2, 0x5, 0x1, 0x3, 0x5eb, 0x5, 0x0, 0x0, 0xfff, 0x3815, 0x7, 0x45, 0xfeb4, 0x3, 0x2, 0x0, 0x8, 0x7, 0x7d8, 0x6, 0x7620, 0x2, 0x7, 0x3, 0x5, 0x80000001, 0x3, 0x9, 0xee8, 0xf17, 0x3, 0x7, 0x81, 0x3, 0x0, 0xff, 0x2, 0x7f, 0xffff, 0x7, 0x401, 0xffff, 0x5, 0x6, 0x1000, 0x7fffffff, 0xf, 0x7, 0x7, 0x0, 0x8a, 0x8, 0x6599ae0, 0x0, 0x100, 0x7, 0x7, 0x3, 0x3, 0x7fff, 0x5, 0x3, 0xe, 0x3, 0xfffffffb, 0x1ff, 0x5, 0x8, 0xffffa352, 0x0, 0x0, 0xe6ea756, 0x0, 0xf90, 0x6, 0x2, 0x6120, 0x3, 0x40, 0x4, 0x1, 0x1, 0x6, 0x3, 0x3, 0x7, 0xffff, 0x8001, 0xfffffffc, 0x6a2c, 0x0, 0x9, 0x7, 0x2, 0xa6, 0x3, 0x1, 0x9, 0x4, 0x9, 0x5, 0xfffffffe, 0x2, 0x2, 0x6, 0x7, 0xffffff2a, 0x10000, 0x9, 0x25cfd110, 0x8001, 0x6, 0xe, 0x9, 0x9, 0x8001, 0x5, 0x9, 0x8000, 0x8, 0xfffeffff, 0x7, 0x7, 0x401, 0x2, 0x4, 0x5, 0x0, 0x5, 0x800, 0x4, 0xfffff37d, 0xa8b, 0x9, 0xf3c, 0x10001, 0x4f475145, 0x6, 0x400, 0x9, 0x2, 0xf, 0xfffffff8, 0x8, 0x9, 0xfffff1ca, 0x8, 0x3ff, 0x4, 0xffffffff, 0x2, 0x9, 0x80, 0x7, 0x1ff, 0x0, 0x2, 0x7, 0x9, 0x100, 0x6, 0x8, 0x0, 0x5, 0x7fff, 0x0, 0x9, 0x0, 0x101, 0xae, 0x80, 0x8, 0x0, 0x7, 0x1064, 0x8, 0x5, 0x2, 0x40, 0x1, 0x7, 0x10000, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x9, 0xb, 0xe6, 0x6, 0xb2b, 0x1, 0xfb, 0x8001, 0x8, 0x4, 0x15280000, 0x4, 0x5, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x1, 0xfffffffb, 0x91fc, 0x5, 0xf78, 0x7, 0x5, 0x8000, 0x2, 0x6, 0x80000000, 0x1000, 0xadda, 0x8, 0x9, 0x8, 0x0, 0x6, 0x1, 0x4, 0x2, 0x9, 0x400, 0x8, 0xfffffffc, 0x2, 0x7ff, 0x7fff, 0x7ff, 0x5, 0x6, 0x0, 0x3, 0x7b8, 0x6, 0x6, 0x78e, 0x1, 0xb, 0x9, 0x0, 0xfffffff7, 0x0, 0x7, 0xb, 0x800, 0x6, 0xffff7fff, 0x401, 0x5, 0x71389031, 0x7, 0xc, 0xc, 0x0, 0xda, 0x2, 0xe, 0x5, 0x9, 0x10000, 0xb, 0x39, 0x9, 0x3, 0x2, 0x8001, 0x9, 0x9, 0xffffffff, 0x8, 0x9, 0xe2, 0x80000001, 0xb36, 0x4a24, 0xf, 0x5d, 0xb, 0x8, 0x1, 0x7, 0xff, 0x1, 0x8, 0x2, 0x2, 0xff, 0x9, 0xc194, 0x2, 0x81, 0x5, 0x1, 0x26df1695, 0x7, 0x6, 0x1ff, 0x1, 0x1, 0x5, 0x6, 0x2, 0x0, 0x1624, 0x9, 0x0, 0x1, 0x4, 0xd6, 0x200, 0xa, 0x4, 0x7f, 0x0, 0xbf, 0x2, 0x401, 0x4, 0x5, 0x80000001, 0x4, 0xd16, 0x4, 0x5, 0x5, 0x5, 0x80000000, 0x2, 0x3ff, 0x1, 0x8000, 0x8, 0x3, 0xdca1, 0x7, 0x8, 0x8, 0x4bac, 0x3, 0xee, 0x1ffe000, 0x7f, 0x9, 0x58, 0x101, 0x4, 0x3, 0x4, 0x6, 0x200, 0x0, 0xfffffff8, 0x7, 0x1ff, 0xe, 0x15bc, 0x80d, 0x3, 0x2, 0x5, 0x4, 0x80000000, 0x9, 0x80, 0x4f0f, 0x71, 0x9, 0x3ad5, 0x5, 0x0, 0x8, 0x0, 0x1, 0x3, 0x7, 0xb7f, 0x8, 0x6, 0x7, 0xa454, 0x10000, 0x2, 0x9, 0x4, 0x9, 0xc524, 0x3c, 0x5, 0x6, 0x9397, 0x6, 0x101, 0x800, 0x54, 0x1, 0x7, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x5, 0x9, 0x5, 0x0, 0xd3ef, 0xd, 0xfffffffd, 0x7, 0x4, 0x4, 0x3, 0xb, 0x5, 0x3, 0x0, 0xe0, 0xfffffffe, 0x6, 0x1000, 0xffffff1d, 0x4, 0x9, 0x3, 0x10, 0xcbb, 0x200, 0x8, 0x4, 0xb, 0x7, 0xd1, 0x21e456d6, 0x401, 0xd, 0x9, 0x10000, 0x9, 0xa3e8, 0xe6f, 0x6, 0xc02, 0xe, 0x4, 0x2, 0x10, 0x1, 0x80000001, 0x4, 0x100, 0x7ff, 0x3, 0x7bd7, 0x4, 0x10, 0xf77c, 0x80000001, 0xe, 0x400, 0x3, 0x101, 0x8, 0x0, 0x10000, 0x5, 0x4, 0x3ff, 0x2, 0xc986, 0x6, 0xfc8c, 0x8c, 0x8000, 0x4f19, 0x0, 0xffff, 0x401, 0x0, 0x7, 0x1, 0x52, 0x3a81, 0xe, 0x3, 0x9, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8, 0x5, 0x81, 0x9, 0x7, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x6, 0x7, 0x5, 0x3, 0x2, 0x7fffffff, 0x3, 0x401, 0xc5, 0x7, 0xe, 0x3, 0xff, 0x9, 0x5f08, 0x2, 0x8, 0x2, 0x4, 0x6, 0x976, 0x7ff, 0x0, 0x8, 0x8, 0x0, 0xbe6, 0x9, 0xbf68, 0x3ff, 0x3, 0x1, 0x3, 0xfff, 0x1, 0x669f1a78, 0x5, 0x3, 0x0, 0x1000, 0x84d, 0x3, 0xfff, 0x7, 0x3de, 0x4, 0x7fffffff, 0x5, 0x3, 0x8, 0x2830589f, 0x6, 0x0, 0x51d, 0x8, 0x7fff, 0xdf9, 0x6, 0x7fffffff, 0x80000000, 0x0, 0x7ff, 0x2, 0x1, 0x1, 0x639000, 0x121d, 0xe9, 0x7fff, 0x7fff, 0xf, 0xffff, 0x9, 0x2, 0x8, 0x6, 0xb, 0x9, 0x3, 0x5, 0x1000, 0x7, 0x0, 0x9f49, 0x8, 0x7fff, 0x2, 0x7b, 0xa60, 0x3cda, 0x4, 0x8, 0xc, 0x2, 0x9, 0xe, 0x5, 0xc, 0x7, 0x2a2, 0x7, 0x101, 0x6000000, 0x1, 0x0, 0xfff, 0x0, 0x400, 0xc5b1, 0x79, 0x1, 0x2, 0x3, 0x2, 0x6, 0x18, 0x3, 0x5, 0x101, 0x5, 0x27e, 0x9, 0x0, 0x25dc, 0x7, 0x154a8000, 0x10000, 0x80000000, 0x4, 0x1, 0x7, 0xff, 0x4, 0x0, 0x1, 0x101, 0x7, 0xd, 0x2, 0x0, 0x7fffffff, 0x2, 0x6, 0x6, 0x48000, 0x2, 0x0, 0x5, 0x5, 0x5, 0x4, 0x1, 0x80, 0x405, 0x7ff, 0x9, 0x7, 0x3, 0x4, 0xba, 0x4, 0xa, 0x5182, 0x6aef, 0x1, 0x9, 0x3, 0x80, 0xe, 0x6, 0x100, 0x42c, 0x2f8, 0x1, 0x7, 0x2, 0x498c, 0x8, 0xd63d, 0x3, 0x3ff, 0x9, 0x4, 0x3, 0xffffffff, 0x9, 0xffff, 0x4, 0x0, 0x1, 0x6, 0x6, 0x5, 0x4, 0x7, 0x1000, 0x1, 0x8001, 0x5, 0x7, 0xf, 0x7, 0x7fffffff, 0x4, 0x55, 0xb4, 0x1, 0x2, 0xffff, 0xb, 0x80000001, 0x3ff, 0x1000, 0x7, 0x54, 0x5, 0x7, 0x2, 0x2d6, 0xca4, 0x5, 0x3, 0x5, 0x3, 0x10001, 0xd646, 0x3, 0xffffffff, 0x65, 0x2, 0x70000000, 0x67c, 0x3, 0x3, 0xfffffff7, 0x8001, 0x80000000, 0xeb, 0x800, 0x81, 0x7, 0x2, 0xa55, 0xe, 0x6, 0xd0000, 0xfffffffe, 0xedd, 0xffff, 0x7, 0x40, 0x2, 0x4, 0x7fffffff, 0x9, 0x4, 0xc, 0xc356, 0x8, 0x9, 0xfffffff8, 0xafe, 0x2, 0x7, 0x7ff, 0xa5, 0x4, 0x7ff, 0x6, 0x6, 0x6, 0x1, 0x101, 0x1, 0xfffffffa, 0x7, 0x9, 0x5, 0xd, 0x29a2, 0xc5, 0x5, 0x3, 0x8, 0x28, 0xa3a9, 0x4, 0x400, 0x873, 0x3, 0xfffffffe, 0x1, 0x2, 0x7, 0x2, 0x0, 0xffffffff, 0x81, 0xfffffff9, 0x4, 0x7, 0x6, 0x4, 0x2, 0x10, 0x0, 0x9, 0xf67, 0x6, 0x9, 0x0, 0xffffffff, 0x7, 0x4, 0x3, 0x1cb, 0xffffa34d, 0x8, 0x4, 0x4b00, 0x478, 0x2cd1, 0x4, 0x1000, 0xf, 0x7d12, 0x5, 0x9615, 0x7, 0x1, 0x4, 0x0, 0x3ff, 0x6, 0x3, 0x7ff, 0x7fff, 0x25, 0x3, 0x200, 0xf, 0x3ff, 0x10000, 0x0, 0x5, 0x8, 0x1000, 0x5, 0x5, 0x29, 0x1, 0x5, 0x7, 0x5, 0x0, 0x1, 0x9, 0x3, 0xffffff55, 0x3, 0xf, 0x5, 0x300, 0x5, 0x8, 0x9, 0x6, 0x7, 0x3, 0x6db9, 0x4, 0x7685, 0xfffffff9, 0x4, 0x5, 0xfff, 0xe, 0x3, 0x2, 0xfff, 0x7ff, 0x206, 0x5, 0x6b1f, 0x3, 0x8, 0x8001, 0x9, 0xb, 0x5, 0x5, 0x2, 0x857, 0x2, 0x6, 0x800000, 0x0, 0xfffffffa, 0x2, 0x8, 0x7, 0x9, 0x3, 0x9, 0x7, 0xa, 0x3, 0xef, 0x0, 0x2e, 0x1ff, 0x4, 0x3, 0x5, 0x200, 0xae1, 0x8, 0x3, 0x4, 0x9, 0x6, 0x5102, 0xbd, 0x100, 0xfffff000, 0xd645, 0xb, 0x400, 0x3, 0x0, 0xe, 0xfffff800, 0x40, 0x76, 0x0, 0xb811, 0x1, 0x1, 0x80, 0x8, 0x29ce7b65, 0xe111c07, 0x3, 0x7, 0x1, 0x6, 0xccc1, 0x9, 0x4, 0x9, 0x401, 0x8, 0x4, 0x6, 0x100, 0x2, 0x1ff, 0x8, 0x7, 0x9, 0x1, 0x5, 0x80000001, 0x5, 0x5, 0x84000000, 0x5, 0x5, 0x3, 0x6, 0x2, 0x3, 0x3]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000640)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x43, &(0x7f00000004c0)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000001340)=ANY=[@ANYBLOB="400f000000001fb72a9be24369a6d5f9bcd7131df8dbe43c08c95a50df63cf585e698ac9b907f24324b565c513a8e3d9d72839195fe429e4f50e94c3819f8789f679f63507261171765b70e279b44cd8299efad663e0c3e582a129fc409faca5a0ef4f81bd62ffc69143c7c780fea4a0dcbbed0f320ff1224922ee985c9cddb1b6ce3225b78b137024828b5ab38f0b3f0e87"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect$hid-syz_usb_connect-syz_usb_disconnect-syz_usb_control_io-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hidraw-syz_usb_control_io$lan78xx-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_control_io$uac1-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io$lan78xx detailed listing: executing program 0: r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0xc, {0xc, 0x21, "74a73178a5d7be108a90"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r2, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x21, 0xcc, {0xcc, 0x21, "ee7dba6a855c521115b53f80592c5dfa6a31c54b9dd533559c06cc4d4623f7867d328bc97c5c8dc6f869e14c6894bd7bf5bf384af72b52ee05e9f2e11214161d741bf704aa70d5ea0e0516403f569220770d9a876d9009c9ab9a042b3a75dd78a5d4a5fb8ab8415263d0a15ba1eed87c0644ccac8d8fcd4332afbad5357261cdb19ec541ae7ead555a9d5d869919def614adff7c1f544333e02febdd5e8502e4dbfa80c838fdb1ae40a3b253362e667e9c291e29ad725912a24682de066f2b3faea9d1f5829ca964f0c5"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f00000008c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "3a9719f53b8d75a99f69870a843fead6"}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x8, 0x2, 0x8, "34dead56", 'pkz6'}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x4, 0xf7, 0x4, 0x5, 0xfff4}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x20, 0x12, 0xad, "00e7a3cd1a5b53b5320059e6a81a92ce4e2805a6082592b3d8b3c0cffa987ef13665f03fc40c38bdd9b3a93a7bcd423be4a451f68f6b6a8756724563376d7805746117eca34816c437224b205148e534283228ebf81e4d94332a2d6a553cff58ef630426654bc09276ea8a35a8ee23103df921d45295ee84cdf216178ec7a638558b23ef9eae039dbad553c4937dad0e8b0055a469bafb65f0cf8378ef67200f864022ea44d3a6361af28ccad1"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x9eca}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "fdbf"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @random="5c13417e4714"}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a46b"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x15}, 0x0, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000e00)={0x40, 0x21, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000f40)={0x14, &(0x7f0000000640)={0x20, 0x24, 0x48, {0x48, 0xc, "848259e7c7151c6aaf4483d60cc2f057d724ee3f411625283512335afa4b45a743e3fcc8bd691e383280957b56ea0fda11c0ecb8519b3f96243ad42999edb69ff6794e1fa6c5"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001140)={0x34, &(0x7f0000000f80)={0x20, 0x30, 0x44, "1f7058b1f469aa697912462920d576013aed7c54d0e9c1f2fa794ed3bcb5afee4b458adb875102df1eb723882aeb6a53c6f7a4a204c4d72b62da9c159f034d3a22f6fb47"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001080)={0xc0, 0xa1, 0x4, 0xb9}, &(0x7f00000010c0)={0x40, 0xa0, 0x4, 0x1f5}, &(0x7f0000001100)={0xc0, 0xa2, 0x2f, "60aaf23e67476f0c7e2c2944f1db0dce7973b80bdf93c51760ebc8c475051e819398a19da268b8a04e08e5e6f23c1f"}}) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000080)="0220") syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x150d67b335ed1332, 0x4b3, 0x3109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x93, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xce6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfe, 0x9, 0xc}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5e, 0x1, 0x76, 0x10, 0x4}, 0x3e, &(0x7f00000005c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x78, "ec51d279949d4e25498e61b1bd9d17a9"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x8, 0xe7f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "07f7a3309fec3c13ef8993099baf2e43"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x9, 0x5, 0xc7af}]}, 0x2, [{0x28, &(0x7f0000000600)=@string={0x28, 0x3, "4a17a9937ddc1e982b5ff2c0c61e467f885385ac7f14fa9ea2d155492530509dc11557964701"}}, {0x77, &(0x7f0000000700)=@string={0x77, 0x3, "741ef0769a6dbc94f464694d24f3e41f5cbd710185e4730c63f9b1f0372a3085912964ba11296f6e33d914ffa17496dd60a04308a1bffac946af86c9648bab8b0a5144c5fd819bed3d02f92c46fa2fd01181884e0662e90a278bf8a104f6235ae66b1d94316d90e4d53aef543c173483de41f6cc49"}}]}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xb, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x0, 0x22, 0xbf, {0xbf, 0x22, "07d9537b4a07d3ba4f256bd8b4fde8dc7e8a1f43c6dd7e7549850b4113b34ed4ae098c41b68f4391e52f0e5f5c2f4e1ff3d42a80c037da518713dac51b8778e4cfd8a122ecbabab41f6519bf4c2924386c9e389b68c7ae540286f742b045d6f3cc95d2a9a21b53bd47f4ccb330c48928c22a375fdeb4c1f2035b6980890e656a56599d541f1834009b53adfdbae03aaa2ef1c9e4b8e00f06db6e7f5264329f9c57794b13f37cef6ca1e822a54fe2227af57895d6260a27cde857422cd3"}}, &(0x7f0000000200)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "dc179d8f05a1d901fe972d3fd31ee57bc797a4f131b95a784ea84a833abd2f2886c375dd4e97645389a9757d9ff383182080f3d4740f1c04c094e416b8727098521fabb0cf8bc2c6f7074a0675c72434309097d2d51070d7ddfd2a4fb85f9ba04fc43c293d9a6ba0bf488ef1bb46b78b2b6a9b5bfea7d78568faf540cd4caa051f815fae65189c85f8a70bc5ce475fb2e0a4b8c116fe912a4244e859f3a7a3ce1647d0293e46a4d1ff878dcead3526b71fdfa47b6aa2e7009e1a9ab9e54c4aeddb8e31d77bc1a3e3d1ca5994c5c4ad035cd3a6fd9d37fde97a665b7d12e5e7dc4ebe"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x40, 0x9, 0x9, "a78280c7adf3e13a44"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "36d0cef372155303647b3dab9931b5b585f04b85be6f6b370d7cfaf35caa875bab08aa5a36cfb608e4fd4730472075"}}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal single: successfully extracted reproducer found reproducer with 24 syscalls minimizing guilty program testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$printer detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS-syz_usb_control_io$printer detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-ioctl$EVIOCGPHYS detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$printer detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io$uac1 detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect-syz_usb_connect detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect-syz_usb_disconnect detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev-syz_usb_connect detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm-syz_open_dev$evdev detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io-syz_usb_ep_write$ath9k_ep1 detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect-syz_usb_control_io detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect-syz_usb_connect detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) program did not crash testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x0, 0xfb, 0xdc, 0x42}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x5c, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m22.32555759s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal simplifying C reproducer testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing compiled C program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING: held lock freed in device_release_driver_internal testing program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal validation run: crashed=true testing program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal validation run: crashed=true testing program (duration=1m22.32555759s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) program crashed: WARNING: held lock freed in device_release_driver_internal validation run: crashed=true reproducing took 1h58m26.793869795s repro crashed as (corrupted=false): usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz usbtv 1-1:3.223: Fushicai USBTV007 Audio-Video Grabber usb 1-1: USB disconnect, device number 2 ========================= WARNING: held lock freed! syzkaller #0 Not tainted ------------------------- kworker/0:3/5676 is freeing memory ffff888033e34000-ffff888033e347ff, with a lock still held there! ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 locks held by kworker/0:3/5676: 5, last CPU#0: #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888020b951d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #2: ffff888020b951d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5912 #3: ffff88802b0601d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #3: ffff88802b0601d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2341 #4: ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #4: ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 stack backtrace: CPU: 0 UID: 0 PID: 5676 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_freed_lock_bug kernel/locking/lockdep.c:6789 [inline] debug_check_no_locks_freed+0x149/0x170 kernel/locking/lockdep.c:6824 slab_free_hook mm/slub.c:2676 [inline] slab_free mm/slub.c:6508 [inline] kfree+0x12b/0x650 mm/slub.c:6801 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 v4l2_device_disconnect+0x79/0xd0 drivers/media/v4l2-core/v4l2-device.c:83 usbtv_video_free+0x25/0x30 drivers/media/usb/usbtv/usbtv-video.c:967 usbtv_disconnect+0x5c/0xa0 drivers/media/usb/usbtv/usbtv-core.c:140 usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:618 [inline] __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372 bus_remove_device+0x444/0x560 drivers/base/bus.c:664 device_del+0x524/0x8f0 drivers/base/core.c:3965 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ================================================================== BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0 drivers/usb/core/driver.c:464 Read of size 8 at addr ffff888033e34008 by task kworker/0:3/5676 CPU: 0 UID: 0 PID: 5676 Comm: kworker/0:3 CPU: 0 UID: 0 PID: 5676 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 usb_unbind_interface+0x2c2/0x9f0 drivers/usb/core/driver.c:464 device_remove drivers/base/dd.c:618 [inline] __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372 bus_remove_device+0x444/0x560 drivers/base/bus.c:664 device_del+0x524/0x8f0 drivers/base/core.c:3965 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Allocated by task 5676: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __kmalloc_cache_noprof+0x321/0x600 mm/slub.c:5563 _kmalloc_noprof include/linux/slab.h:991 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] usb_set_configuration+0x3cc/0x2180 drivers/usb/core/message.c:2096 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250 usb_probe_device+0x1c3/0x3b0 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x254/0xae0 drivers/base/dd.c:706 __driver_probe_device+0x1e8/0x360 drivers/base/dd.c:868 driver_probe_device+0x4f/0x240 drivers/base/dd.c:898 __device_attach_driver+0x270/0x410 drivers/base/dd.c:1026 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500 __device_attach+0x2c4/0x450 drivers/base/dd.c:1098 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1153 bus_probe_device+0x12a/0x220 drivers/base/bus.c:620 device_add+0x7d7/0xb80 drivers/base/core.c:3776 usb_new_device+0x9aa/0x1690 drivers/usb/core/hub.c:2708 hub_port_connect drivers/usb/core/hub.c:5580 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x28e8/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Freed by task 5676: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2748 [inline] slab_free mm/slub.c:6508 [inline] kfree+0x1c5/0x650 mm/slub.c:6801 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 v4l2_device_disconnect+0x79/0xd0 drivers/media/v4l2-core/v4l2-device.c:83 usbtv_video_free+0x25/0x30 drivers/media/usb/usbtv/usbtv-video.c:967 usbtv_disconnect+0x5c/0xa0 drivers/media/usb/usbtv/usbtv-core.c:140 usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:618 [inline] __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372 bus_remove_device+0x444/0x560 drivers/base/bus.c:664 device_del+0x524/0x8f0 drivers/base/core.c:3965 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff888033e34000 which belongs to the cache kmalloc-2k of size 2048 The buggy address is located 8 bytes inside of freed 2048-byte region [ffff888033e34000, ffff888033e34800) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33e30 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5665, tgid 5665 (kworker/1:4), ts 109166465684 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1871 prep_new_page mm/page_alloc.c:1879 [inline] get_page_from_freelist+0x2209/0x2280 mm/page_alloc.c:3943 __alloc_frozen_pages_noprof+0x217/0x5a0 mm/page_alloc.c:5436 alloc_slab_page mm/slub.c:3347 [inline] allocate_slab+0x7d/0x620 mm/slub.c:3462 new_slab mm/slub.c:3513 [inline] refill_objects+0x2d5/0x350 mm/slub.c:7417 refill_sheaf mm/slub.c:2885 [inline] __pcs_replace_empty_main+0x2c8/0x6c0 mm/slub.c:4774 alloc_from_pcs mm/slub.c:4850 [inline] slab_alloc_node mm/slub.c:4984 [inline] __do_kmalloc_node mm/slub.c:5413 [inline] __kmalloc_node_track_caller_noprof+0x548/0x720 mm/slub.c:5545 kmalloc_reserve net/core/skbuff.c:637 [inline] __alloc_skb+0x2c1/0x7a0 net/core/skbuff.c:715 alloc_skb include/linux/skbuff.h:1384 [inline] mld_newpack+0x165/0xcb0 net/ipv6/mcast.c:1810 add_grhead net/ipv6/mcast.c:1921 [inline] add_grec+0x119f/0x19d0 net/ipv6/mcast.c:2060 mld_send_initial_cr+0x288/0x550 net/ipv6/mcast.c:2305 mld_dad_work+0x3d/0x480 net/ipv6/mcast.c:2331 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 page last free pid 5665 tgid 5665 ts 109030937059 stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2962 __slab_free+0x274/0x2c0 mm/slub.c:5823 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_node_noprof+0x354/0x610 mm/slub.c:5068 __alloc_skb+0x1db/0x7a0 net/core/skbuff.c:704 alloc_skb include/linux/skbuff.h:1384 [inline] mld_newpack+0x165/0xcb0 net/ipv6/mcast.c:1810 add_grhead net/ipv6/mcast.c:1921 [inline] add_grec+0x119f/0x19d0 net/ipv6/mcast.c:2060 mld_send_initial_cr+0x288/0x550 net/ipv6/mcast.c:2305 mld_dad_work+0x3d/0x480 net/ipv6/mcast.c:2331 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Memory state around the buggy address: ffff888033e33f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888033e33f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff888033e34000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888033e34080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888033e34100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== final repro crashed as (corrupted=false): usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz usbtv 1-1:3.223: Fushicai USBTV007 Audio-Video Grabber usb 1-1: USB disconnect, device number 2 ========================= WARNING: held lock freed! syzkaller #0 Not tainted ------------------------- kworker/0:3/5676 is freeing memory ffff888033e34000-ffff888033e347ff, with a lock still held there! ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 locks held by kworker/0:3/5676: 5, last CPU#0: #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888022ed5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000423fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888020b951d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #2: ffff888020b951d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5912 #3: ffff88802b0601d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #3: ffff88802b0601d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2341 #4: ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #4: ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff888033e341a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 stack backtrace: CPU: 0 UID: 0 PID: 5676 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_freed_lock_bug kernel/locking/lockdep.c:6789 [inline] debug_check_no_locks_freed+0x149/0x170 kernel/locking/lockdep.c:6824 slab_free_hook mm/slub.c:2676 [inline] slab_free mm/slub.c:6508 [inline] kfree+0x12b/0x650 mm/slub.c:6801 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 v4l2_device_disconnect+0x79/0xd0 drivers/media/v4l2-core/v4l2-device.c:83 usbtv_video_free+0x25/0x30 drivers/media/usb/usbtv/usbtv-video.c:967 usbtv_disconnect+0x5c/0xa0 drivers/media/usb/usbtv/usbtv-core.c:140 usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:618 [inline] __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372 bus_remove_device+0x444/0x560 drivers/base/bus.c:664 device_del+0x524/0x8f0 drivers/base/core.c:3965 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ================================================================== BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0 drivers/usb/core/driver.c:464 Read of size 8 at addr ffff888033e34008 by task kworker/0:3/5676 CPU: 0 UID: 0 PID: 5676 Comm: kworker/0:3 CPU: 0 UID: 0 PID: 5676 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 usb_unbind_interface+0x2c2/0x9f0 drivers/usb/core/driver.c:464 device_remove drivers/base/dd.c:618 [inline] __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372 bus_remove_device+0x444/0x560 drivers/base/bus.c:664 device_del+0x524/0x8f0 drivers/base/core.c:3965 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Allocated by task 5676: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __kmalloc_cache_noprof+0x321/0x600 mm/slub.c:5563 _kmalloc_noprof include/linux/slab.h:991 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] usb_set_configuration+0x3cc/0x2180 drivers/usb/core/message.c:2096 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250 usb_probe_device+0x1c3/0x3b0 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x254/0xae0 drivers/base/dd.c:706 __driver_probe_device+0x1e8/0x360 drivers/base/dd.c:868 driver_probe_device+0x4f/0x240 drivers/base/dd.c:898 __device_attach_driver+0x270/0x410 drivers/base/dd.c:1026 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500 __device_attach+0x2c4/0x450 drivers/base/dd.c:1098 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1153 bus_probe_device+0x12a/0x220 drivers/base/bus.c:620 device_add+0x7d7/0xb80 drivers/base/core.c:3776 usb_new_device+0x9aa/0x1690 drivers/usb/core/hub.c:2708 hub_port_connect drivers/usb/core/hub.c:5580 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x28e8/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Freed by task 5676: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2748 [inline] slab_free mm/slub.c:6508 [inline] kfree+0x1c5/0x650 mm/slub.c:6801 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 v4l2_device_disconnect+0x79/0xd0 drivers/media/v4l2-core/v4l2-device.c:83 usbtv_video_free+0x25/0x30 drivers/media/usb/usbtv/usbtv-video.c:967 usbtv_disconnect+0x5c/0xa0 drivers/media/usb/usbtv/usbtv-core.c:140 usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:618 [inline] __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372 bus_remove_device+0x444/0x560 drivers/base/bus.c:664 device_del+0x524/0x8f0 drivers/base/core.c:3965 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5966 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff888033e34000 which belongs to the cache kmalloc-2k of size 2048 The buggy address is located 8 bytes inside of freed 2048-byte region [ffff888033e34000, ffff888033e34800) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33e30 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5665, tgid 5665 (kworker/1:4), ts 109166465684 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1871 prep_new_page mm/page_alloc.c:1879 [inline] get_page_from_freelist+0x2209/0x2280 mm/page_alloc.c:3943 __alloc_frozen_pages_noprof+0x217/0x5a0 mm/page_alloc.c:5436 alloc_slab_page mm/slub.c:3347 [inline] allocate_slab+0x7d/0x620 mm/slub.c:3462 new_slab mm/slub.c:3513 [inline] refill_objects+0x2d5/0x350 mm/slub.c:7417 refill_sheaf mm/slub.c:2885 [inline] __pcs_replace_empty_main+0x2c8/0x6c0 mm/slub.c:4774 alloc_from_pcs mm/slub.c:4850 [inline] slab_alloc_node mm/slub.c:4984 [inline] __do_kmalloc_node mm/slub.c:5413 [inline] __kmalloc_node_track_caller_noprof+0x548/0x720 mm/slub.c:5545 kmalloc_reserve net/core/skbuff.c:637 [inline] __alloc_skb+0x2c1/0x7a0 net/core/skbuff.c:715 alloc_skb include/linux/skbuff.h:1384 [inline] mld_newpack+0x165/0xcb0 net/ipv6/mcast.c:1810 add_grhead net/ipv6/mcast.c:1921 [inline] add_grec+0x119f/0x19d0 net/ipv6/mcast.c:2060 mld_send_initial_cr+0x288/0x550 net/ipv6/mcast.c:2305 mld_dad_work+0x3d/0x480 net/ipv6/mcast.c:2331 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 page last free pid 5665 tgid 5665 ts 109030937059 stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2962 __slab_free+0x274/0x2c0 mm/slub.c:5823 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_node_noprof+0x354/0x610 mm/slub.c:5068 __alloc_skb+0x1db/0x7a0 net/core/skbuff.c:704 alloc_skb include/linux/skbuff.h:1384 [inline] mld_newpack+0x165/0xcb0 net/ipv6/mcast.c:1810 add_grhead net/ipv6/mcast.c:1921 [inline] add_grec+0x119f/0x19d0 net/ipv6/mcast.c:2060 mld_send_initial_cr+0x288/0x550 net/ipv6/mcast.c:2305 mld_dad_work+0x3d/0x480 net/ipv6/mcast.c:2331 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Memory state around the buggy address: ffff888033e33f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888033e33f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff888033e34000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888033e34080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888033e34100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================