Extracting prog: 18m7.166943342s Minimizing prog: 32m51.993741785s Simplifying prog options: 3m42.800804107s Extracting C: 1m58.318909862s Simplifying C: 28m11.345535293s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$inet6_sctp-socket$packet-openat$kvm-dup-ioctl$KVM_CHECK_EXTENSION-setsockopt$packet_fanout-sendmsg$inet detailed listing: executing program 0: socket$kcm(0x2, 0x3, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xf4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10, 0x0}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$sierra_net-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x2, 0xa4, {0xa4, 0x7, "1ff5a91016c96726224b109acdf7862188ab7146957fd408f8f6e4207723e0d272d01a343c58565cc046751aa9e4563cea62691c99d680486df69ae70a4a6f773ada9ed757f54d5bb09d22646f684acd67f48c66ecaf54686b6e09bb0d8ce63b3452817f1f6689ea03a47a59ff05727e5f20b6e60d310fda867000e38c79c00ca13c8756ec7f3a80947b72bc1a27e4a17bec59d732f4a5bf9f896bef90a8248b1fca"}}, &(0x7f00000002c0)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "ab18c25f4bddb038c02da4b9aba82dd44a7e83230343971a3dc9f3fe7fde528653c0a39f8fa36d5fb0dd5007385798880eb3ccabb099966ff198fc826bc0eb5b0717da05a459558ce367ea66fb07e641ffd2d512e6a7dc6d3a402b846cff526118cf534f382dd97ff2b67c30704046eef359826fc0824414d9719dc7b779c79426641d0e02e79bbaee80ac7be95ca87571ed53f90e5ebcd997fdb61f7cd4d4bb7ba0fdb1d88bbeacd32c625ce9c4"}}, &(0x7f0000000380)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "04e4a82c24cefce32acf3f4a5db2fcee"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, 'Z5GK', "f3937498"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x5, 0x2, 0x81, 0x238, 0xfffd}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x20, 0xc, 0x7b, "b5ba2b2a66b63a76f4ff8112b83def34b818acaf36062767c6244c9ff2c9a093857f992b1dc905223f170857a4a18ec030aba710e5c065dc3d7e2433c56de5db954c5690fb0da01e770a38ceb47c74af1a18b426d04110f44d989de013b52b8dafa8ed0fa6e57025c70646cb9def34b54778caccc9d57272b32c41"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x24}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000780)={0x40, 0xb, 0x2, "9fdd"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="eb7ed62d0496"}, &(0x7f0000000940)={0x40, 0x19, 0x2, '>\a'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x80b}, &(0x7f0000000440)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000b80)={0x14, &(0x7f00000004c0)={0x40, 0x24, 0xf, {0xf, 0x22, "ca2315cce32b9fbc631e1c49e4"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000bc0)={0x20, 0x9, 0xe6, "1d7f72043eef8d7d79600ad3124fa8b920ce04a6fc1c10373c18db8f986fb6269cd26a1de22e3a2a526f78291e161eec27628ec76a8148f945b3b9a1209b9b6327cd2447414070770d688937c869f92fb6475d3b824e0dd710196fc9657e624bc938c52ae8b85e4f2e2280ac22bc7a89b7090675a05450911f9e9d30d03317fc7abd451ca3e758c7473a02b9000f553b2144dbdb189a1711c467a97baa2257777fd96e8a26fd86291efea3fb601bc442152b4ca01dd60ac4e947cd8ce645e84c9cb42f5b26fd07c37df551cad804b8ce94e026600f8d9749a7c99770784320c5de6f03d9e727"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000d80)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000dc0)={0xc0, 0xa2, 0x2f, "db2fcdf6b44d5921a917aa47b83a552243cdd33a9e2fa4a5c7f46d608ce6ca8c97eed9e7b0553222389f033c272e8a"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40eb076eff00fa0074197c3de1b917413797670f33d666d4db53f7ee61a5d154377a1d14e9815abbbaf2a17f01000000f26440c5ded16a10cc7d7a233b998b60eebe839536119ae3acf7981921c1f58a2cccaaa4b6dcfb3548f5b7c1b1114a17892d64ec6e2e679a5944be8dc31f01c25479bf4bffefce42df4d6c58dfc989236be13c4c0d21185e4cbef6237834aaebb99677b1052195ba751d3df4893f95b7b025152f13bf5622529f3c01ca1c655df2f7cb809fd8bdbde389da9ed218b5f68bd13a71f87ece90f209e8accd3dde44d113626cd5ca117b21"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-syz_usb_connect-syz_emit_vhci-syz_usb_connect-socket$inet6_mptcp-socket$nl_generic-syz_usb_connect-syz_genetlink_get_family_id$ethtool-openat$tun-ioctl$TUNSETIFF-openat$cuse-sendmsg$ETHTOOL_MSG_COALESCE_GET-getsockopt$inet6_mptcp_buf-ioctl$IOCTL_GET_NCIDEV_IDX-sendmsg$kcm-recvmsg$kcm detailed listing: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef960b40b1134200035101"], 0x0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYRES16], 0x7) syz_usb_connect(0x3, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x6bf1c2d5adba9d32}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x4008800) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@nfc_llcp={0x27, r4, 0x0, 0x1, 0x6, 0x3, "d77fa59ff0f9141d7096c7e4b14228c8abcb4e38e05259be09500a0e004f3f9d33527acc287de9cde713afe79cf345cd7688a90c4b6e7d72df6a5801c67653", 0x23}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)="10d40f43b6a1f6f438c724ecb96eafebbeff55a3a5be1f3ad636be2d051cbb131d083119a7d3e7d369e698903ac52354aa617581d6e7af59fc33194261725595aeba4fbc050bbae5818b9f573ed3c4a9e2ca4c222a1b7e4ee2a9f541c5428170d245bb6234b8ee7b7a146371539ba3a404cfa7422dbbe20b1d0e63175f24b32be87d28ea74ad9ee1d9e873b0f7534a948535d79fb1e0ff9feed3aba299bdbf3bab87d155", 0xa4}, {&(0x7f0000000280)="376944c6564979cbe975f2470a30ed44fd26c234fecc11ed12306336a0ac76e7310d818b0d8e7838d0410a29799ae7866996cb2ac4413a7679a876521e8ff7a0dee1fc2456993e29a431c297d76404fa83c5f2c04de01dd25317b7ef8abce30a383e172eddd74d2e41366a9e6d784da5bc5141f8188875928e927a0e0b5dadad0a74fafae5e2332b13e3af6def955dad134278a9d5d8e86adf6bd007da69dc435445256ef3271509f943ac6882411773dcbdafa4f77d330c56f204c1d36f97108abc4086eb4a93f03663e7581e9deab8990eaf0f84ca5aa607bab4c06361ff1bc6e0dd4cc5f7fb2bdc06c292ecdbe0", 0xef}, {&(0x7f0000000380)="b9f6e1cef12a649681b153d88327f6cf98730b147e29262fe1d41d5dd0f8fa2dd40e1dc975d695e1898ee46fa14b973bbd062fab8526a1d488156174c01f494b17c60c30ce8b2011f3b2bdb8d1c1a20da8b6c2f072", 0x55}, {&(0x7f0000000400)="a8c50f1209cc9968f6320c9ed334af053e47f7622c04d923f7e4cc190cd0b74e0652c7096183fb3252349e74", 0x2c}, {&(0x7f0000000440)="835e324939c686850eaa000268938493ded217425dd77ad6885dc7e2f9921ac807287de4773e69f881bfea883f31ea3056bfd2f6d2e2fe1df76bc6647b1fba1acd52ef1f23380caba4e19b5e662c1ecb5547a766918fd1e6c17a6e8b0705a60d3e950100f185bd227fa73f4a4aeeae51693035974b115818fafa20ad374d91d997557f97f795c6b319f41134b5929b0c2fe2a4dc6f57d10a9fc4d9384e95eefc6ceb4408d54b4b730f904561b86c1ada6489cbbb9f52ac69a59ed566545eb00f1ffd738a0f12a1f931bec7be607b631155e893639db771b076b94a5080b0ae", 0xdf}, {&(0x7f0000000540)="fdbdc9024136dd2e4d7b8569bca9a24c4878e4a62a2b9b58f6b1dd071f001a84a6ff3df093907dbd60c316ac6e72e9acd7cc31c0301c51386f413cdf0c2c0931f0a73afeb65bd2adb4612122364c8a9effe1e872c22eea420ccaa5128502e845498fd9dd1b3c3425489db1a960f0846bc0686dc9f45ded9dfa24d4f8bbb145645305143f9946e1bb6050bf331989bdab84965d9f98009a297c1832b4ce1a22700a9e738e659e3e68ee48c34046d48600d7c1af6b728362beec8e67c2e98d10f1b513737fe18d4b26b023cc3ecb51e3c409e2f38de55a231e1510bb5f74d48e25ec2cbbbb198d47f263cc617f3bb6d2b2e94e6b40a1f7b228a096af8ae0f9", 0xfe}, {&(0x7f0000000640)="6be6c5ae4048e9c55fcea9d6dd6f241b5a8ec2fc6f0aeb4b16f05cff9e323031b819303e65e9a287a23604a9f38930e61bbf5c3adea843ca9192a2cd", 0x3c}, {&(0x7f0000000680)="698f9ef3623ec507fb5fb31fa739d4ce4002b006981e5204b9533455d23b8ad296620ded4ce526cf0e25d776c9d3083a0d53f15dd84d8f69c4bd3ce389e44fb6b5f92ff34e0308eda062b7588b99835da7b1dc8e1522a4a99e59e2dafc20b23a90fcd5c6971abf85b1bc491de524d9f466dc8171ab5d0904cd69677d5a1327761ffbf9bb171765fe1c52ba868d3fd5b85747a34566a208b9b1b829", 0x9b}], 0x8}, 0x801) recvmsg$kcm(r0, 0x0, 0x120) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 20, 13, 2, 14, 4, 2, 30, 13, 17, 11, 2, 8, 17, 3, 2, 11, 8, 7, 14, 30, 16, 13, 8] detailed listing: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x0, 0x0, 0x6}) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="a905000000007464000140000000afd1866853a6289a746700000001000000e5c0dab5149d3d5fae1540a891", 0x2c}], 0x1}}], 0x1, 0x24000800) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000640)={0x0, [[0x9ef7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x10000, 0x0, 0x0, 0x0, 0x1, 0x8006], [0x7]], '\x00', [{0x0, 0x1}, {0x2}, {0x80000, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x6}, {0x1, 0x4000005f, 0x1}, {0x0, 0x3}, {}, {0x3}, {0x3, 0x8762}, {0x0, 0xffffffff}, {0x100}], '\x00', 0x101000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000040)) open_tree(r4, &(0x7f00000008c0)='\x00', 0x1001) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5d, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000200)={@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x3, 0x3, 0x0, 0x1}}, {&(0x7f00000000c0)=""/129, 0x81}, &(0x7f0000000180), 0x10}, 0xa0) executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) listen(r1, 0xfffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e", 0x19}], 0x1}], 0x1, 0x20000801) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) syz_open_procfs(r0, &(0x7f0000000200)='smaps_rollup\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x4000814) syz_usb_disconnect(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x2, 0xa4, {0xa4, 0x7, "1ff5a91016c96726224b109acdf7862188ab7146957fd408f8f6e4207723e0d272d01a343c58565cc046751aa9e4563cea62691c99d680486df69ae70a4a6f773ada9ed757f54d5bb09d22646f684acd67f48c66ecaf54686b6e09bb0d8ce63b3452817f1f6689ea03a47a59ff05727e5f20b6e60d310fda867000e38c79c00ca13c8756ec7f3a80947b72bc1a27e4a17bec59d732f4a5bf9f896bef90a8248b1fca"}}, &(0x7f00000002c0)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "ab18c25f4bddb038c02da4b9aba82dd44a7e83230343971a3dc9f3fe7fde528653c0a39f8fa36d5fb0dd5007385798880eb3ccabb099966ff198fc826bc0eb5b0717da05a459558ce367ea66fb07e641ffd2d512e6a7dc6d3a402b846cff526118cf534f382dd97ff2b67c30704046eef359826fc0824414d9719dc7b779c79426641d0e02e79bbaee80ac7be95ca87571ed53f90e5ebcd997fdb61f7cd4d4bb7ba0fdb1d88bbeacd32c625ce9c4"}}, &(0x7f0000000380)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "04e4a82c24cefce32acf3f4a5db2fcee"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, 'Z5GK', "f3937498"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x5, 0x2, 0x81, 0x238, 0xfffd}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x20, 0xc, 0x7b, "b5ba2b2a66b63a76f4ff8112b83def34b818acaf36062767c6244c9ff2c9a093857f992b1dc905223f170857a4a18ec030aba710e5c065dc3d7e2433c56de5db954c5690fb0da01e770a38ceb47c74af1a18b426d04110f44d989de013b52b8dafa8ed0fa6e57025c70646cb9def34b54778caccc9d57272b32c41"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x24}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000780)={0x40, 0xb, 0x2, "9fdd"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="eb7ed62d0496"}, &(0x7f0000000940)={0x40, 0x19, 0x2, '>\a'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x80b}, &(0x7f0000000440)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000b80)={0x14, &(0x7f00000004c0)={0x40, 0x24, 0xf, {0xf, 0x22, "ca2315cce32b9fbc631e1c49e4"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000bc0)={0x20, 0x9, 0xe6, "1d7f72043eef8d7d79600ad3124fa8b920ce04a6fc1c10373c18db8f986fb6269cd26a1de22e3a2a526f78291e161eec27628ec76a8148f945b3b9a1209b9b6327cd2447414070770d688937c869f92fb6475d3b824e0dd710196fc9657e624bc938c52ae8b85e4f2e2280ac22bc7a89b7090675a05450911f9e9d30d03317fc7abd451ca3e758c7473a02b9000f553b2144dbdb189a1711c467a97baa2257777fd96e8a26fd86291efea3fb601bc442152b4ca01dd60ac4e947cd8ce645e84c9cb42f5b26fd07c37df551cad804b8ce94e026600f8d9749a7c99770784320c5de6f03d9e727"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000d80)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000dc0)={0xc0, 0xa2, 0x2f, "db2fcdf6b44d5921a917aa47b83a552243cdd33a9e2fa4a5c7f46d608ce6ca8c97eed9e7b0553222389f033c272e8a"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40eb076eff00fa0074197c3de1b917413797670f33d666d4db53f7ee61a5d154377a1d14e9815abbbaf2a17f01000000f26440c5ded16a10cc7d7a233b998b60eebe839536119ae3acf7981921c1f58a2cccaaa4b6dcfb3548f5b7c1b1114a17892d64ec6e2e679a5944be8dc31f01c25479bf4bffefce42df4d6c58dfc989236be13c4c0d21185e4cbef6237834aaebb99677b1052195ba751d3df4893f95b7b025152f13bf5622529f3c01ca1c655df2f7cb809fd8bdbde389da9ed218b5f68bd13a71f87ece90f209e8accd3dde44d113626cd5ca117b21"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (fail_nth: 3) executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r4, r0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) fchown(r0, 0x0, 0x0) (fail_nth: 4) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xa, 0x3f80, 0x0, 0x0, @str=':*^${\x00'}]}, 0x1c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) executing program 1: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x110b, 0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af25, &(0x7f0000000180)={@host}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x8242, 0x0, 0x1, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r6 = eventfd(0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRESOCT=r5], 0x0) r7 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1f57ff33, 0x10000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, @any, 0x9, 0x1}, 0xe) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="60a5c2ebea25b6b5aae80949008fc3fe"}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x4c}}, 0x20000000) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010000000140fc00060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r6) setsockopt(0xffffffffffffffff, 0xfffffff3, 0x25e8, &(0x7f0000000000)="31a8db169e60f888389a06aac5d1de70abdae19e405752773a573525ea2fd7652605cc23fa", 0x25) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/39, 0x0, 0x2cb004}) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1dfcc31f}]}, 0x64}, 0x1, 0x0, 0x0, 0x240408d0}, 0x4048010) recvmmsg$unix(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000700)=""/239, 0xef}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000004b00)=""/174, 0xae}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/220, 0xdc}], 0x7}}], 0x1, 0x0, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0xf, 0x14}, {0x5, 0x1000, 0x3, 0x23d3, [0x8, 0x9, 0x8, 0x6, 0x5, 0x45d]}}}}, 0x21) executing program 0: prctl$PR_SET_MM_EXE_FILE(0x27, 0xd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4008011) r4 = accept(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000b9d8e45cc95af9a337e7dd8b1db1358ab180b50700d854480ebc264893d93d2de054348970bb91884df41830bfd6b8658ad4be8128233dd6fc9239971343319d25d5269af91f332013a5ee24aac41576516e3950b03356215cd10bea26dcfecca27ace07487efb600e7344b8b17156c6f159d58df12fc0f23294675eb4a8123e531d5726f7c6e62a2e9acb5c0b7b6a9d74688d0f935d993416eb08b5d3f4a79260a62e63fdf885471ff095009f97a8637b7f471a8cfb4f2ce461d118ea5dc74704", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf2501000000080004000800000008000200070000000800030007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x49081}, 0x40040c0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_socket_connect_nvme_tcp() recvmsg(r6, &(0x7f0000001700)={&(0x7f0000000440)=@ieee802154, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/131, 0x83}], 0x1, &(0x7f0000001640)=""/150, 0x96}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) executing program 1: madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80801) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x8, 0x2001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000001680)={0x0, 0xb2f3, 0x2, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x10}], 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap$xdp(&(0x7f000012f000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x80000000) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000140)={0xe8, 0xa}, 0x2) executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xa, 0x800) syz_open_dev$sndctrl(&(0x7f0000000000), 0xa, 0x800) (async) executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000204e0000", 0x58}], 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000016c0)={0x25, &(0x7f0000000000)=[{0x16, '\x00', @st={0x4, [{0x3, @uvalue=0x4}, {0x2, @svalue=0x5}, {0x1, @svalue=0x1}, {0x2, @svalue=0xf2}]}, 0x3}]}) close(r1) executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="001106"], 0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x80000, 0x0, 0x0, 0x0, {0x21}, &(0x7f00000001c0), 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x25, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4}, {r3, 0x1}, {r5, 0x20}], 0x3, &(0x7f00000000c0)={r6, r7+10000000}, &(0x7f0000000100), 0x8) ptrace$peeksig(0x4212, r2, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xf91, 0x8) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x14, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@nested={0x4, 0x1b}]}, 0x14}], 0x1, 0x0, 0x0, 0x20400}, 0x0) executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce403", 0x6}, {&(0x7f00000006c0)='\b', 0x1}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xb0, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x33d}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x9090) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'bond_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x1, 0x2, {0xb, @udp_ip4_spec={@multicast2, @empty, 0x4e22, 0x4e20, 0x8}, {0x0, @empty, 0x9, 0xffff, [0x6, 0x7]}, @esp_ip6_spec={@mcast2, @mcast1, 0x0, 0x6}, {0x0, @random="3f917701c0a1", 0x3bd, 0x3, [0x9, 0x2]}, 0x8, 0x4c0e408}}}) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, &(0x7f0000000380)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, &(0x7f0000000380)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc2482, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f630001696f2b6d626d00"], 0xc) (async) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f630001696f2b6d626d00"], 0xc) syz_open_pts(r0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x3000000, 0x0) pread64(r2, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) r3 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000180)={"11d66945", 0x8001, 0x7, 0x7, 0x6643885, 0x9, "778c566a06dcd0d53ffd09a4179be6", "7333d88f", "629e9321", "b648674c", ["7f28a170d08a04d0977d6420", "42766ad182aae70e379e881b", "89c781857f41cc91819514fc", "35beb412865cd09791a12552"]}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d000b0000000000000000000500000008000300040010000c0001"], 0x28}}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x2e, 0x1, 0x0, "a3b047a0856037ccc31c53e6d78a999c1e2996ef52540bb426f39d7656d127e6"}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000240)={0x401, 0x20001000, 0x4000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1016d62f", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250800000008000b0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x4000084) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0xa, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc0870000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20010, r6, 0xec779000) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef960b40b1134200035101"], 0x0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYRES16], 0x7) syz_usb_connect(0x3, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x6bf1c2d5adba9d32}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x4008800) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@nfc_llcp={0x27, r4, 0x0, 0x1, 0x6, 0x3, "d77fa59ff0f9141d7096c7e4b14228c8abcb4e38e05259be09500a0e004f3f9d33527acc287de9cde713afe79cf345cd7688a90c4b6e7d72df6a5801c67653", 0x23}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)="10d40f43b6a1f6f438c724ecb96eafebbeff55a3a5be1f3ad636be2d051cbb131d083119a7d3e7d369e698903ac52354aa617581d6e7af59fc33194261725595aeba4fbc050bbae5818b9f573ed3c4a9e2ca4c222a1b7e4ee2a9f541c5428170d245bb6234b8ee7b7a146371539ba3a404cfa7422dbbe20b1d0e63175f24b32be87d28ea74ad9ee1d9e873b0f7534a948535d79fb1e0ff9feed3aba299bdbf3bab87d155", 0xa4}, {&(0x7f0000000280)="376944c6564979cbe975f2470a30ed44fd26c234fecc11ed12306336a0ac76e7310d818b0d8e7838d0410a29799ae7866996cb2ac4413a7679a876521e8ff7a0dee1fc2456993e29a431c297d76404fa83c5f2c04de01dd25317b7ef8abce30a383e172eddd74d2e41366a9e6d784da5bc5141f8188875928e927a0e0b5dadad0a74fafae5e2332b13e3af6def955dad134278a9d5d8e86adf6bd007da69dc435445256ef3271509f943ac6882411773dcbdafa4f77d330c56f204c1d36f97108abc4086eb4a93f03663e7581e9deab8990eaf0f84ca5aa607bab4c06361ff1bc6e0dd4cc5f7fb2bdc06c292ecdbe0", 0xef}, {&(0x7f0000000380)="b9f6e1cef12a649681b153d88327f6cf98730b147e29262fe1d41d5dd0f8fa2dd40e1dc975d695e1898ee46fa14b973bbd062fab8526a1d488156174c01f494b17c60c30ce8b2011f3b2bdb8d1c1a20da8b6c2f072", 0x55}, {&(0x7f0000000400)="a8c50f1209cc9968f6320c9ed334af053e47f7622c04d923f7e4cc190cd0b74e0652c7096183fb3252349e74", 0x2c}, {&(0x7f0000000440)="835e324939c686850eaa000268938493ded217425dd77ad6885dc7e2f9921ac807287de4773e69f881bfea883f31ea3056bfd2f6d2e2fe1df76bc6647b1fba1acd52ef1f23380caba4e19b5e662c1ecb5547a766918fd1e6c17a6e8b0705a60d3e950100f185bd227fa73f4a4aeeae51693035974b115818fafa20ad374d91d997557f97f795c6b319f41134b5929b0c2fe2a4dc6f57d10a9fc4d9384e95eefc6ceb4408d54b4b730f904561b86c1ada6489cbbb9f52ac69a59ed566545eb00f1ffd738a0f12a1f931bec7be607b631155e893639db771b076b94a5080b0ae", 0xdf}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f0000000640)="6be6c5ae4048e9c55fcea9d6dd6f241b5a8ec2fc6f0aeb4b16f05cff9e323031b819303e65e9a287a23604a9f38930e61bbf5c3adea843ca9192a2cd", 0x3c}, {&(0x7f0000000680)="698f9ef3623ec507fb5fb31fa739d4ce4002b006981e5204b9533455d23b8ad296620ded4ce526cf0e25d776c9d3083a0d53f15dd84d8f69c4bd3ce389e44fb6b5f92ff34e0308eda062b7588b99835da7b1dc8e1522a4a99e59e2dafc20b23a90fcd5c6971abf85b1bc491de524d9f466dc8171ab5d0904cd69677d5a1327761ffbf9bb171765fe1c52ba868d3fd5b85747a34566a208b9b1b829", 0x9b}], 0x8}, 0x801) recvmsg$kcm(r0, 0x0, 0x120) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x2, 0xa4, {0xa4, 0x7, "1ff5a91016c96726224b109acdf7862188ab7146957fd408f8f6e4207723e0d272d01a343c58565cc046751aa9e4563cea62691c99d680486df69ae70a4a6f773ada9ed757f54d5bb09d22646f684acd67f48c66ecaf54686b6e09bb0d8ce63b3452817f1f6689ea03a47a59ff05727e5f20b6e60d310fda867000e38c79c00ca13c8756ec7f3a80947b72bc1a27e4a17bec59d732f4a5bf9f896bef90a8248b1fca"}}, &(0x7f00000002c0)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "ab18c25f4bddb038c02da4b9aba82dd44a7e83230343971a3dc9f3fe7fde528653c0a39f8fa36d5fb0dd5007385798880eb3ccabb099966ff198fc826bc0eb5b0717da05a459558ce367ea66fb07e641ffd2d512e6a7dc6d3a402b846cff526118cf534f382dd97ff2b67c30704046eef359826fc0824414d9719dc7b779c79426641d0e02e79bbaee80ac7be95ca87571ed53f90e5ebcd997fdb61f7cd4d4bb7ba0fdb1d88bbeacd32c625ce9c4"}}, &(0x7f0000000380)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "04e4a82c24cefce32acf3f4a5db2fcee"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, 'Z5GK', "f3937498"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x5, 0x2, 0x81, 0x238, 0xfffd}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x20, 0xc, 0x7b, "b5ba2b2a66b63a76f4ff8112b83def34b818acaf36062767c6244c9ff2c9a093857f992b1dc905223f170857a4a18ec030aba710e5c065dc3d7e2433c56de5db954c5690fb0da01e770a38ceb47c74af1a18b426d04110f44d989de013b52b8dafa8ed0fa6e57025c70646cb9def34b54778caccc9d57272b32c41"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x24}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000780)={0x40, 0xb, 0x2, "9fdd"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="eb7ed62d0496"}, &(0x7f0000000940)={0x40, 0x19, 0x2, '>\a'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x80b}, &(0x7f0000000440)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000b80)={0x14, &(0x7f00000004c0)={0x40, 0x24, 0xf, {0xf, 0x22, "ca2315cce32b9fbc631e1c49e4"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000bc0)={0x20, 0x9, 0xe6, "1d7f72043eef8d7d79600ad3124fa8b920ce04a6fc1c10373c18db8f986fb6269cd26a1de22e3a2a526f78291e161eec27628ec76a8148f945b3b9a1209b9b6327cd2447414070770d688937c869f92fb6475d3b824e0dd710196fc9657e624bc938c52ae8b85e4f2e2280ac22bc7a89b7090675a05450911f9e9d30d03317fc7abd451ca3e758c7473a02b9000f553b2144dbdb189a1711c467a97baa2257777fd96e8a26fd86291efea3fb601bc442152b4ca01dd60ac4e947cd8ce645e84c9cb42f5b26fd07c37df551cad804b8ce94e026600f8d9749a7c99770784320c5de6f03d9e727"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000d80)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000dc0)={0xc0, 0xa2, 0x2f, "db2fcdf6b44d5921a917aa47b83a552243cdd33a9e2fa4a5c7f46d608ce6ca8c97eed9e7b0553222389f033c272e8a"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40eb076eff00fa0074197c3de1b917413797670f33d666d4db53f7ee61a5d154377a1d14e9815abbbaf2a17f01000000f26440c5ded16a10cc7d7a233b998b60eebe839536119ae3acf7981921c1f58a2cccaaa4b6dcfb3548f5b7c1b1114a17892d64ec6e2e679a5944be8dc31f01c25479bf4bffefce42df4d6c58dfc989236be13c4c0d21185e4cbef6237834aaebb99677b1052195ba751d3df4893f95b7b025152f13bf5622529f3c01ca1c655df2f7cb809fd8bdbde389da9ed218b5f68bd13a71f87ece90f209e8accd3dde44d113626cd5ca117b21"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) executing program 1: socket$kcm(0x2, 0x3, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xf4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10, 0x0}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$inet6_sctp-socket$packet-openat$kvm-dup-ioctl$KVM_CHECK_EXTENSION-setsockopt$packet_fanout-sendmsg$inet detailed listing: executing program 0: socket$kcm(0x2, 0x3, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xf4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10, 0x0}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$lan78xx-syz_usb_control_io$sierra_net-syz_usb_control_io$hid-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x2, 0xa4, {0xa4, 0x7, "1ff5a91016c96726224b109acdf7862188ab7146957fd408f8f6e4207723e0d272d01a343c58565cc046751aa9e4563cea62691c99d680486df69ae70a4a6f773ada9ed757f54d5bb09d22646f684acd67f48c66ecaf54686b6e09bb0d8ce63b3452817f1f6689ea03a47a59ff05727e5f20b6e60d310fda867000e38c79c00ca13c8756ec7f3a80947b72bc1a27e4a17bec59d732f4a5bf9f896bef90a8248b1fca"}}, &(0x7f00000002c0)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "ab18c25f4bddb038c02da4b9aba82dd44a7e83230343971a3dc9f3fe7fde528653c0a39f8fa36d5fb0dd5007385798880eb3ccabb099966ff198fc826bc0eb5b0717da05a459558ce367ea66fb07e641ffd2d512e6a7dc6d3a402b846cff526118cf534f382dd97ff2b67c30704046eef359826fc0824414d9719dc7b779c79426641d0e02e79bbaee80ac7be95ca87571ed53f90e5ebcd997fdb61f7cd4d4bb7ba0fdb1d88bbeacd32c625ce9c4"}}, &(0x7f0000000380)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "04e4a82c24cefce32acf3f4a5db2fcee"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, 'Z5GK', "f3937498"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x5, 0x2, 0x81, 0x238, 0xfffd}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x20, 0xc, 0x7b, "b5ba2b2a66b63a76f4ff8112b83def34b818acaf36062767c6244c9ff2c9a093857f992b1dc905223f170857a4a18ec030aba710e5c065dc3d7e2433c56de5db954c5690fb0da01e770a38ceb47c74af1a18b426d04110f44d989de013b52b8dafa8ed0fa6e57025c70646cb9def34b54778caccc9d57272b32c41"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x120, 0x24}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000780)={0x40, 0xb, 0x2, "9fdd"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="eb7ed62d0496"}, &(0x7f0000000940)={0x40, 0x19, 0x2, '>\a'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x80b}, &(0x7f0000000440)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000b80)={0x14, &(0x7f00000004c0)={0x40, 0x24, 0xf, {0xf, 0x22, "ca2315cce32b9fbc631e1c49e4"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000bc0)={0x20, 0x9, 0xe6, "1d7f72043eef8d7d79600ad3124fa8b920ce04a6fc1c10373c18db8f986fb6269cd26a1de22e3a2a526f78291e161eec27628ec76a8148f945b3b9a1209b9b6327cd2447414070770d688937c869f92fb6475d3b824e0dd710196fc9657e624bc938c52ae8b85e4f2e2280ac22bc7a89b7090675a05450911f9e9d30d03317fc7abd451ca3e758c7473a02b9000f553b2144dbdb189a1711c467a97baa2257777fd96e8a26fd86291efea3fb601bc442152b4ca01dd60ac4e947cd8ce645e84c9cb42f5b26fd07c37df551cad804b8ce94e026600f8d9749a7c99770784320c5de6f03d9e727"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000d80)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000dc0)={0xc0, 0xa2, 0x2f, "db2fcdf6b44d5921a917aa47b83a552243cdd33a9e2fa4a5c7f46d608ce6ca8c97eed9e7b0553222389f033c272e8a"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40eb076eff00fa0074197c3de1b917413797670f33d666d4db53f7ee61a5d154377a1d14e9815abbbaf2a17f01000000f26440c5ded16a10cc7d7a233b998b60eebe839536119ae3acf7981921c1f58a2cccaaa4b6dcfb3548f5b7c1b1114a17892d64ec6e2e679a5944be8dc31f01c25479bf4bffefce42df4d6c58dfc989236be13c4c0d21185e4cbef6237834aaebb99677b1052195ba751d3df4893f95b7b025152f13bf5622529f3c01ca1c655df2f7cb809fd8bdbde389da9ed218b5f68bd13a71f87ece90f209e8accd3dde44d113626cd5ca117b21"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-syz_usb_connect-syz_emit_vhci-syz_usb_connect-socket$inet6_mptcp-socket$nl_generic-syz_usb_connect-syz_genetlink_get_family_id$ethtool-openat$tun-ioctl$TUNSETIFF-openat$cuse-sendmsg$ETHTOOL_MSG_COALESCE_GET-getsockopt$inet6_mptcp_buf-ioctl$IOCTL_GET_NCIDEV_IDX-sendmsg$kcm-recvmsg$kcm detailed listing: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef960b40b1134200035101"], 0x0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYRES16], 0x7) syz_usb_connect(0x3, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x6bf1c2d5adba9d32}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x4008800) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@nfc_llcp={0x27, r4, 0x0, 0x1, 0x6, 0x3, "d77fa59ff0f9141d7096c7e4b14228c8abcb4e38e05259be09500a0e004f3f9d33527acc287de9cde713afe79cf345cd7688a90c4b6e7d72df6a5801c67653", 0x23}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)="10d40f43b6a1f6f438c724ecb96eafebbeff55a3a5be1f3ad636be2d051cbb131d083119a7d3e7d369e698903ac52354aa617581d6e7af59fc33194261725595aeba4fbc050bbae5818b9f573ed3c4a9e2ca4c222a1b7e4ee2a9f541c5428170d245bb6234b8ee7b7a146371539ba3a404cfa7422dbbe20b1d0e63175f24b32be87d28ea74ad9ee1d9e873b0f7534a948535d79fb1e0ff9feed3aba299bdbf3bab87d155", 0xa4}, {&(0x7f0000000280)="376944c6564979cbe975f2470a30ed44fd26c234fecc11ed12306336a0ac76e7310d818b0d8e7838d0410a29799ae7866996cb2ac4413a7679a876521e8ff7a0dee1fc2456993e29a431c297d76404fa83c5f2c04de01dd25317b7ef8abce30a383e172eddd74d2e41366a9e6d784da5bc5141f8188875928e927a0e0b5dadad0a74fafae5e2332b13e3af6def955dad134278a9d5d8e86adf6bd007da69dc435445256ef3271509f943ac6882411773dcbdafa4f77d330c56f204c1d36f97108abc4086eb4a93f03663e7581e9deab8990eaf0f84ca5aa607bab4c06361ff1bc6e0dd4cc5f7fb2bdc06c292ecdbe0", 0xef}, {&(0x7f0000000380)="b9f6e1cef12a649681b153d88327f6cf98730b147e29262fe1d41d5dd0f8fa2dd40e1dc975d695e1898ee46fa14b973bbd062fab8526a1d488156174c01f494b17c60c30ce8b2011f3b2bdb8d1c1a20da8b6c2f072", 0x55}, {&(0x7f0000000400)="a8c50f1209cc9968f6320c9ed334af053e47f7622c04d923f7e4cc190cd0b74e0652c7096183fb3252349e74", 0x2c}, {&(0x7f0000000440)="835e324939c686850eaa000268938493ded217425dd77ad6885dc7e2f9921ac807287de4773e69f881bfea883f31ea3056bfd2f6d2e2fe1df76bc6647b1fba1acd52ef1f23380caba4e19b5e662c1ecb5547a766918fd1e6c17a6e8b0705a60d3e950100f185bd227fa73f4a4aeeae51693035974b115818fafa20ad374d91d997557f97f795c6b319f41134b5929b0c2fe2a4dc6f57d10a9fc4d9384e95eefc6ceb4408d54b4b730f904561b86c1ada6489cbbb9f52ac69a59ed566545eb00f1ffd738a0f12a1f931bec7be607b631155e893639db771b076b94a5080b0ae", 0xdf}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f0000000640)="6be6c5ae4048e9c55fcea9d6dd6f241b5a8ec2fc6f0aeb4b16f05cff9e323031b819303e65e9a287a23604a9f38930e61bbf5c3adea843ca9192a2cd", 0x3c}, {&(0x7f0000000680)="698f9ef3623ec507fb5fb31fa739d4ce4002b006981e5204b9533455d23b8ad296620ded4ce526cf0e25d776c9d3083a0d53f15dd84d8f69c4bd3ce389e44fb6b5f92ff34e0308eda062b7588b99835da7b1dc8e1522a4a99e59e2dafc20b23a90fcd5c6971abf85b1bc491de524d9f466dc8171ab5d0904cd69677d5a1327761ffbf9bb171765fe1c52ba868d3fd5b85747a34566a208b9b1b829", 0x9b}], 0x8}, 0x801) recvmsg$kcm(r0, 0x0, 0x120) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: KASAN: use-after-free Read in v4l2_open single: successfully extracted reproducer found reproducer with 8 syscalls minimizing guilty program testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$printer-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$printer-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: KASAN: use-after-free Read in v4l2_open testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: KASAN: use-after-free Read in v4l2_open testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "472a535436a69a1026d8235af52410aba125571999229f323cd40dd391152337278d8c57c8a9ec19749be1605603e5665b3a21f4669012e112e0d0ec09bd1f746c36dee31fb17a9a04575ad06d28ffdb1be8f06fcde931a0bbe81fa828eefa761222a4197f88eaa659035c1a3d445175b30f8805a323fb86d1f66d838a068761035496b1addb76d41b2fe3fcd954ab82cb4626231cec39c9c6691edd88ee6ae0280b7c3f66a3f041ce07b4081541c0e0b7f32eba500b087fba885e16519172b47b82ddab32eff5b3e8e0be295d49ff14bf5daa8f80c24256af766a282df3a8ff3b28d355f5fb2468315df9624a79294b03bdf49ea761aa7040a8750efe9a81bea7d07a698a498f895e5968109bca9f4f105781b66d939e9a0797ba252261ce4b3a81b3ff4d159a495ac44364373af1645a3d272d11f3ea6c34ae2b4c26034d822e3748d1ebc008974139069cd082552174822134e531d15c02c6625114ef19b560c997a30e26dfd71ccd4b1e9a2f6615495ca75d996e4cd5e6f16d5da7e506a2274cf2bfaf8a96aa69b93f57953ad0b8dfc1ec1e03e571b6ce0b70926ed8055d5067a8a96e1b1fe5a7b859f4b9dfea1e8d804726a578575c0be2e446582a79761d8429a7181ed173c9f89d75b6235f75331d4318a339e15b939dc54c74ee10678ca44fa229f2717bb875943f02400072bfad420df5cd049415c67ad659ea3237ed626154e67fc51b8fa6b09a348ad72ec108cab03eaee15a993dd31786380bdd395ee68b1be84be3a164e0495d141b9ecc9a7754bbfbcd6291a0f9d25349898be0298a97c2062fb58d0339f1c29cb439e5566a9d72caad598ec6a2e33d4ab19d4cc7d657da7f42f73426215776249bbbdbb7e231c5ae581bac2aa1dc33be668da2d5b470068587c071c852c3618c4c61dc49415950c26ba98b39a64915b4ae3cefbda50bd07d7f750e29dbddbb6eb4204641d77593a0bbdacdc76081e2b356fd413199c7ae8f1fb05f67fc228ba99f2c85a58accca14a5a36a367c287b3e8562cac9cef1f3190dfc8a769a9fa01f71dcadb3c76b8e63bb38e4d7521c2e6c21297d3ceda8b0e60fd29bc9ce901819caea2a1c1db25feffe7fa4edbc022ba63f53b09fb3fd9f3461ca3a58673060864cca3be4ed664e5e3efb5a0c8c0d3c061456c6a0f06d4fdf64febf8b03434b7d958c49d4c832f96d776f5d0311378b445a5b0a60bff4e601540bb3f7d73daddc9ac2f5cd7e44eb78194a8fee4c43b9446fd63c8fb72f4660f7b3e0f08ed8162422c1cbc903c564f1f2bc6f9d1478c7ae0f7b99251a2c195859ade291d576cb6bd522be11f18a3da1d9813c707aefcdd52314eadee5e69c7277d7a718e5fab049c89f5ae88e3335fa6405a2cdc4a408914cc77977653a5761bf0e5ca98e11624bf76424b6e7d1d664d0db08fa090977a67dc2"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0xf, 0xdd, {0xdd, 0x0, "f49f571731bc176a1a91cc1b41bccc4c695069c5970773f864ca3ffde58c5badabc0a756183faf496c4c273ed4da4a38b9208e5015ae49e39a89777e20c042f1b8dedbf73063cce464710d805851f6ff5968b97996b11c15ea3b3ab42378cf5af0157b04dd543f73d40a48f7e4174157f5eea97108718b32edfed4e1105662195df8fff771e201c76ba93a8ee08da8337b78aa28886e5663a8dc4022169aa0b92a40801b39906ac5ad499dc8db0eb0f6597784602625cbe3799801ff16ea5601121fe168c10af64382f0b684adafb29f58f5a67c1162fef206781b"}}, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "472a535436a69a1026d8235af52410aba125571999229f323cd40dd391152337278d8c57c8a9ec19749be1605603e5665b3a21f4669012e112e0d0ec09bd1f746c36dee31fb17a9a04575ad06d28ffdb1be8f06fcde931a0bbe81fa828eefa761222a4197f88eaa659035c1a3d445175b30f8805a323fb86d1f66d838a068761035496b1addb76d41b2fe3fcd954ab82cb4626231cec39c9c6691edd88ee6ae0280b7c3f66a3f041ce07b4081541c0e0b7f32eba500b087fba885e16519172b47b82ddab32eff5b3e8e0be295d49ff14bf5daa8f80c24256af766a282df3a8ff3b28d355f5fb2468315df9624a79294b03bdf49ea761aa7040a8750efe9a81bea7d07a698a498f895e5968109bca9f4f105781b66d939e9a0797ba252261ce4b3a81b3ff4d159a495ac44364373af1645a3d272d11f3ea6c34ae2b4c26034d822e3748d1ebc008974139069cd082552174822134e531d15c02c6625114ef19b560c997a30e26dfd71ccd4b1e9a2f6615495ca75d996e4cd5e6f16d5da7e506a2274cf2bfaf8a96aa69b93f57953ad0b8dfc1ec1e03e571b6ce0b70926ed8055d5067a8a96e1b1fe5a7b859f4b9dfea1e8d804726a578575c0be2e446582a79761d8429a7181ed173c9f89d75b6235f75331d4318a339e15b939dc54c74ee10678ca44fa229f2717bb875943f02400072bfad420df5cd049415c67ad659ea3237ed626154e67fc51b8fa6b09a348ad72ec108cab03eaee15a993dd31786380bdd395ee68b1be84be3a164e0495d141b9ecc9a7754bbfbcd6291a0f9d25349898be0298a97c2062fb58d0339f1c29cb439e5566a9d72caad598ec6a2e33d4ab19d4cc7d657da7f42f73426215776249bbbdbb7e231c5ae581bac2aa1dc33be668da2d5b470068587c071c852c3618c4c61dc49415950c26ba98b39a64915b4ae3cefbda50bd07d7f750e29dbddbb6eb4204641d77593a0bbdacdc76081e2b356fd413199c7ae8f1fb05f67fc228ba99f2c85a58accca14a5a36a367c287b3e8562cac9cef1f3190dfc8a769a9fa01f71dcadb3c76b8e63bb38e4d7521c2e6c21297d3ceda8b0e60fd29bc9ce901819caea2a1c1db25feffe7fa4edbc022ba63f53b09fb3fd9f3461ca3a58673060864cca3be4ed664e5e3efb5a0c8c0d3c061456c6a0f06d4fdf64febf8b03434b7d958c49d4c832f96d776f5d0311378b445a5b0a60bff4e601540bb3f7d73daddc9ac2f5cd7e44eb78194a8fee4c43b9446fd63c8fb72f4660f7b3e0f08ed8162422c1cbc903c564f1f2bc6f9d1478c7ae0f7b99251a2c195859ade291d576cb6bd522be11f18a3da1d9813c707aefcdd52314eadee5e69c7277d7a718e5fab049c89f5ae88e3335fa6405a2cdc4a408914cc77977653a5761bf0e5ca98e11624bf76424b6e7d1d664d0db08fa090977a67dc2"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: KASAN: use-after-free Read in v4l2_open testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program did not crash testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "efc4ea3f986a018da7c151b299e236aae672aee2e848ea11afc9307ebe978851379540faf040af71feb0b2ce9c62834bfe33abddf1f0d5dc56fbb4ac583ca96612b46cc913dd92501438b53dcd36785dcdc66b4a3e1416a0d1cd037ea1c13af806f265e0b5e58d4a"}}}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: KASAN: use-after-free Read in v4l2_open testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f0000000c80)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x71, "1ed4d9130dc9c0721a3a9fd80970ac951ddcf6a0b90da15fa35f47d763701e660825268c3cad0360fa35d52498ca0fdf79af769c403dea4d8e09647ab845075c488f37f2bacf815ff6a1bbaeb7c74846348eee114f997bcf4d7095f53bca20ce8ac57675b0ec62273254a0dfec51f78469"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c40)={0x21, 0x0, 0x2, "86ae"}}) program crashed: KASAN: use-after-free Read in v4l2_open testing program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) program crashed: KASAN: use-after-free Read in v4l2_open extracting C reproducer testing compiled C program (duration=1m55.958687563s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program did not crash simplifying guilty program options testing program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) program crashed: KASAN: use-after-free Read in v4l2_open extracting C reproducer testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open simplifying C reproducer testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program did not crash testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program did not crash testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program did not crash testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program did not crash testing compiled C program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net program crashed: KASAN: use-after-free Read in v4l2_open testing program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) program crashed: KASAN: use-after-free Read in v4l2_open validation run: crashed=true testing program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) program did not crash validation run: crashed=false testing program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) program crashed: KASAN: use-after-free Read in v4l2_open validation run: crashed=true testing program (duration=1m55.958687563s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_open_dev$video-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$sierra_net detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x2100) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) program crashed: KASAN: use-after-free Read in v4l2_open validation run: crashed=true reproducing took 1h34m4.120329047s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 drivers/media/v4l2-core/v4l2-dev.c:444 Read of size 4 at addr ffff8880463c09d0 by task v4l_id/6237 CPU: 0 UID: 0 PID: 6237 Comm: v4l_id Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 v4l2_open+0x398/0x3a0 drivers/media/v4l2-core/v4l2-dev.c:444 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411 do_dentry_open+0x83d/0x13e0 fs/open.c:947 vfs_open+0x3b/0x350 fs/open.c:1079 do_open fs/namei.c:4699 [inline] path_openat+0x2e43/0x38a0 fs/namei.c:4858 do_file_open+0x23e/0x4a0 fs/namei.c:4887 do_sys_openat2+0x113/0x200 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7eff26341407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffc03bbbf00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007eff26253880 RCX: 00007eff26341407 RDX: 0000000000000000 RSI: 00007ffc03bbcf1d RDI: ffffffffffffff9c RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 00007ffc03bbc150 R14: 00007eff26ad7000 R15: 00005567540f24d8 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880463c2400 pfn:0x463c0 flags: 0x80000000000000(node=0|zone=1) raw: 0080000000000000 ffffea0000c1c208 ffff8880b8742cc0 0000000000000000 raw: ffff8880463c2400 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6022, tgid 6022 (kworker/1:9), ts 191100284065, free_ts 191426888676 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1861 prep_new_page mm/page_alloc.c:1869 [inline] get_page_from_freelist+0x27d6/0x2850 mm/page_alloc.c:3949 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5292 alloc_pages_mpol+0xd1/0x380 mm/mempolicy.c:2490 ___kmalloc_large_node+0x4e/0x120 mm/slub.c:5249 __kmalloc_large_noprof+0x1a/0x90 mm/slub.c:5270 kmalloc_noprof include/linux/slab.h:947 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] em28xx_v4l2_init+0xe0/0x3320 drivers/media/usb/em28xx/em28xx-video.c:2709 em28xx_init_extension+0x120/0x1c0 drivers/media/usb/em28xx/em28xx-core.c:1248 process_one_work+0x98b/0x1630 kernel/workqueue.c:3306 process_scheduled_works kernel/workqueue.c:3389 [inline] worker_thread+0xb49/0x1140 kernel/workqueue.c:3470 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 page last free pid 6022 tgid 6022 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1405 [inline] __free_frozen_pages+0x1075/0x11b0 mm/page_alloc.c:2946 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2289 [inline] kref_put include/linux/kref.h:65 [inline] em28xx_v4l2_init+0x18e9/0x3320 drivers/media/usb/em28xx/em28xx-video.c:3080 em28xx_init_extension+0x120/0x1c0 drivers/media/usb/em28xx/em28xx-core.c:1248 process_one_work+0x98b/0x1630 kernel/workqueue.c:3306 process_scheduled_works kernel/workqueue.c:3389 [inline] worker_thread+0xb49/0x1140 kernel/workqueue.c:3470 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Memory state around the buggy address: ffff8880463c0880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff8880463c0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff8880463c0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff8880463c0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff8880463c0a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 drivers/media/v4l2-core/v4l2-dev.c:444 Read of size 4 at addr ffff8880463c09d0 by task v4l_id/6237 CPU: 0 UID: 0 PID: 6237 Comm: v4l_id Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 v4l2_open+0x398/0x3a0 drivers/media/v4l2-core/v4l2-dev.c:444 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411 do_dentry_open+0x83d/0x13e0 fs/open.c:947 vfs_open+0x3b/0x350 fs/open.c:1079 do_open fs/namei.c:4699 [inline] path_openat+0x2e43/0x38a0 fs/namei.c:4858 do_file_open+0x23e/0x4a0 fs/namei.c:4887 do_sys_openat2+0x113/0x200 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7eff26341407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffc03bbbf00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007eff26253880 RCX: 00007eff26341407 RDX: 0000000000000000 RSI: 00007ffc03bbcf1d RDI: ffffffffffffff9c RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 00007ffc03bbc150 R14: 00007eff26ad7000 R15: 00005567540f24d8 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880463c2400 pfn:0x463c0 flags: 0x80000000000000(node=0|zone=1) raw: 0080000000000000 ffffea0000c1c208 ffff8880b8742cc0 0000000000000000 raw: ffff8880463c2400 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6022, tgid 6022 (kworker/1:9), ts 191100284065, free_ts 191426888676 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1861 prep_new_page mm/page_alloc.c:1869 [inline] get_page_from_freelist+0x27d6/0x2850 mm/page_alloc.c:3949 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5292 alloc_pages_mpol+0xd1/0x380 mm/mempolicy.c:2490 ___kmalloc_large_node+0x4e/0x120 mm/slub.c:5249 __kmalloc_large_noprof+0x1a/0x90 mm/slub.c:5270 kmalloc_noprof include/linux/slab.h:947 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] em28xx_v4l2_init+0xe0/0x3320 drivers/media/usb/em28xx/em28xx-video.c:2709 em28xx_init_extension+0x120/0x1c0 drivers/media/usb/em28xx/em28xx-core.c:1248 process_one_work+0x98b/0x1630 kernel/workqueue.c:3306 process_scheduled_works kernel/workqueue.c:3389 [inline] worker_thread+0xb49/0x1140 kernel/workqueue.c:3470 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 page last free pid 6022 tgid 6022 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1405 [inline] __free_frozen_pages+0x1075/0x11b0 mm/page_alloc.c:2946 em28xx_free_v4l2 drivers/media/usb/em28xx/em28xx-video.c:2289 [inline] kref_put include/linux/kref.h:65 [inline] em28xx_v4l2_init+0x18e9/0x3320 drivers/media/usb/em28xx/em28xx-video.c:3080 em28xx_init_extension+0x120/0x1c0 drivers/media/usb/em28xx/em28xx-core.c:1248 process_one_work+0x98b/0x1630 kernel/workqueue.c:3306 process_scheduled_works kernel/workqueue.c:3389 [inline] worker_thread+0xb49/0x1140 kernel/workqueue.c:3470 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Memory state around the buggy address: ffff8880463c0880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff8880463c0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff8880463c0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff8880463c0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff8880463c0a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================