Extracting prog: 33m47.295187923s Minimizing prog: 21m33.087650118s Simplifying prog options: 0s Extracting C: 2m16.934315705s Simplifying C: 9m25.923073974s extracting reproducer from 42 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$netlink-ioctl$SIOCSIFHWADDR-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_ENABLE_BEARER detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-setsockopt$inet_tcp_int-bind$inet-connect$inet-setsockopt$inet_tcp_TCP_REPAIR_OPTIONS-setsockopt$inet_tcp_TCP_REPAIR-sendto$inet-recvfrom$inet detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect$uac1-syz_open_dev$hidraw-write$hidraw detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x19}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x7, 0x1, 0x6, 0x7], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7b, 0x2, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcccc, 0x7, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0xb, {0x7, 0x25, 0x1, 0xc, 0xe5, 0x4}}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r1, &(0x7f0000000200)='\x00\x00', 0x2) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_usb_disconnect-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect$hid-syz_open_dev$char_usb-ioctl$EVIOCRMFF detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x7ffd, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write$ath9k_ep1-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_ep_read(r2, 0xa, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x108, &(0x7f0000001500)=ANY=[@ANYBLOB="0201"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$cdc_ncm-syz_usb_connect$uac1-syz_usb_control_io-syz_open_dev$evdev-syz_usb_control_io$printer-syz_usb_connect$hid-syz_usb_disconnect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$sierra_net-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) r0 = syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xcabb7aab17d1f79d) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a092226"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 42 programs with base timeout 1m40s testing program (duration=1m50s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13, 18, 5, 4, 2, 4, 15, 23, 9, 16, 6, 26, 19, 6, 21, 3, 7, 9, 22, 12, 2, 2, 7, 13, 11, 5, 2, 3, 4, 3, 3, 24, 13, 3, 7, 12, 14, 6, 13, 8, 12] detailed listing: executing program 5: syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$midi(0x5, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x6, 0x50, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x2, [@midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x62, 0x3, [{0x5f, 0x6}, {0x1, 0x1}, {0x3, 0x8}], 0x4}, @ms_header={0x7, 0x24, 0x1, 0xbf, 0x7}, @midi_out_jack={0x1b, 0x24, 0x3, 0x0, 0x3, 0xa, [{0x8, 0x73}, {0xc, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0xfa}, {0x1, 0x3}, {0x11, 0x4}, {0xdd, 0x3}, {0x6, 0x8}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x5b3b4acd3ce8ff6a, 0xf, 0x6}, @midi_out_jack={0x19, 0x24, 0x3, 0x7, 0x5, 0x9, [{0x4, 0x3}, {0x3, 0x2}, {0x23, 0x25}, {0xfc, 0xc6}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x2}], 0x9}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x1, 0x3, [{0x6, 0x2}, {0x32, 0x8}, {0x9, 0xfb}], 0x6}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x34, 0x6, 0xe8, {0x7, 0x25, 0x1, 0x3, "5710d1"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x80, 0x0, 0xf, 0xff, 0x8}, 0x69, &(0x7f0000000300)={0x5, 0xf, 0x69, 0x5, [@generic={0x42, 0x10, 0xb, "46e373f8ea39b6132fcd81cbb8f92cd10e415e594b32afd79842ac0884777115ac6df993ddd46e86f82033b86d9553c7a815f08cad4eb694a0e614bedc4dbc"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x1, 0x6, 0x326c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0xd, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2a, 0x60, 0x4, 0x8, 0x5}]}, 0x3, [{0x91, &(0x7f0000000380)=@string={0x91, 0x3, "671d3167f95d7768b76ac97a8da02cc6a822badd8505e504132f46953f0876c794d3eda9a991cad565343b06fc2fb4d10352173001612c37cf271f277c66e9a7b31fc26414d614a98aa4828c125f56af6b655697b92c440384600303945ec07de10c014f4575b59689c6a1489e8872b92c25ecea2dac5c98b3a4f20a49c4b6aec68d1bbff2e922a43271e38c852248"}}, {0x16, &(0x7f0000000440)=@string={0x16, 0x3, "db37380180d4043b3a9290b6c3baf23cdc34dd4f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44f}}]}) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@empty, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x7191, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x48000) executing program 3: sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x3c, r2, 0x5, 0x1000000, 0x102, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000008) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0c007d800400070004"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40815}, 0xc000) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="4345ae040217", @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) executing program 5: r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_ep_read(r2, 0xa, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x108, &(0x7f0000001500)=ANY=[@ANYBLOB="0201"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) executing program 6: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010700000000000000000a000000488b6de1427ac6f3beaf1ba39cb3c2206be9794fa078d2424fdbdd5d35fdfa6c85e2b7000000"], 0x14}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="41040210"], 0x7) executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="241000000300000000000000000000000a08000340000020df07001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc0485510, &(0x7f0000000f00)=ANY=[@ANYBLOB="20002d23b949f807"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$inet6(r0, 0x0, 0x0) executing program 3: syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) r4 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/231) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000040)=0x7) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0x61, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848"}, 0x0, 0x0}) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100000001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0) write$hidraw(r1, &(0x7f0000000000)="fda09ba19d819cab390880691a749c5943b926f11c497f67d671d9a5809cf347ea56676f69e28f24e7df6335546f09da44da0a7b477e137e88fe4dc095cfe3f791ce7b4f583c50ea58c64c3b7a3d2413faf93738bd24dc97", 0x58) executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4"], 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) executing program 6: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x100, 0x39, 0xfc, 0xd, 0x10, 0xace, 0x2011, 0x426c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x6, 0x80, 0x7, "", [{{0x9, 0x4, 0xa1, 0x3c, 0x2, 0x94, 0x55, 0xb3, 0x6, [], [{{0x9, 0x5, 0xb, 0x1e, 0x28, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x238, 0x3, 0x0, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) executing program 2: syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x4002) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)=""/184) executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) get_robust_list(0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) shutdown(r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) executing program 4: syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8000, 0xff, 0x1, {0x22, 0xfdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000008) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0xa4, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a"]}]}, 0xa4}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_delrule={0x4c, 0x21, 0x100, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x3, 0x14}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x8}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x4a}]}, 0x4c}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002c80)={@val={0x6f01, 0x4305}, @val={0x0, 0x0, 0x9, 0x0, 0x27}, @llc={@snap={0xaa, 0x0, 'x', "4600d8", 0x88a2, "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"}}}, 0xfce) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32, @ANYBLOB="402000000000000014001a80100004800c000a8008000300"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0045b0f, 0x0) executing program 4: syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) r0 = syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xcabb7aab17d1f79d) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a092226"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) executing program 5: r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_ep_read(r2, 0xa, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x108, &(0x7f0000001500)=ANY=[@ANYBLOB="0201"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) executing program 6: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x7ffd, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x19}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x7, 0x1, 0x6, 0x7], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7b, 0x2, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcccc, 0x7, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0xb, {0x7, 0x25, 0x1, 0xc, 0xe5, 0x4}}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r1, &(0x7f0000000200)='\x00\x00', 0x2) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: bisecting 42 programs bisect: split chunks (needed=false): <42> bisect: split chunk #0 of len 42 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 21, 3, 7, 9, 22, 12, 2, 2, 7, 13, 11, 5, 2, 3, 4, 3, 3, 24, 13, 3, 7, 12, 14, 6, 13, 8, 12] detailed listing: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100000001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0) write$hidraw(r1, &(0x7f0000000000)="fda09ba19d819cab390880691a749c5943b926f11c497f67d671d9a5809cf347ea56676f69e28f24e7df6335546f09da44da0a7b477e137e88fe4dc095cfe3f791ce7b4f583c50ea58c64c3b7a3d2413faf93738bd24dc97", 0x58) executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4"], 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) executing program 6: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x100, 0x39, 0xfc, 0xd, 0x10, 0xace, 0x2011, 0x426c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x6, 0x80, 0x7, "", [{{0x9, 0x4, 0xa1, 0x3c, 0x2, 0x94, 0x55, 0xb3, 0x6, [], [{{0x9, 0x5, 0xb, 0x1e, 0x28, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x238, 0x3, 0x0, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) executing program 2: syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x4002) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)=""/184) executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) get_robust_list(0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) shutdown(r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) executing program 4: syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8000, 0xff, 0x1, {0x22, 0xfdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000008) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0xa4, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a"]}]}, 0xa4}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_delrule={0x4c, 0x21, 0x100, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x3, 0x14}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x8}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x4a}]}, 0x4c}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002c80)={@val={0x6f01, 0x4305}, @val={0x0, 0x0, 0x9, 0x0, 0x27}, @llc={@snap={0xaa, 0x0, 'x', "4600d8", 0x88a2, "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"}}}, 0xfce) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32, @ANYBLOB="402000000000000014001a80100004800c000a8008000300"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0045b0f, 0x0) executing program 4: syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) r0 = syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xcabb7aab17d1f79d) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a092226"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) executing program 5: r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_ep_read(r2, 0xa, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x108, &(0x7f0000001500)=ANY=[@ANYBLOB="0201"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) executing program 6: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x7ffd, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x19}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x7, 0x1, 0x6, 0x7], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7b, 0x2, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcccc, 0x7, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0xb, {0x7, 0x25, 0x1, 0xc, 0xe5, 0x4}}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r1, &(0x7f0000000200)='\x00\x00', 0x2) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4, 3, 3, 24, 13, 3, 7, 12, 14, 6, 13, 8, 12] detailed listing: executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0xa4, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a"]}]}, 0xa4}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_delrule={0x4c, 0x21, 0x100, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x3, 0x14}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x8}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x4a}]}, 0x4c}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002c80)={@val={0x6f01, 0x4305}, @val={0x0, 0x0, 0x9, 0x0, 0x27}, @llc={@snap={0xaa, 0x0, 'x', "4600d8", 0x88a2, "6c1dd15cdf340037898bd4abb623be79f99e08cc1681421c49e9ede40a9926b6259c8fe6176e0eb000dc311b55ce921680ef80bf9331b0b8c07d5e71f4d07a757a089563c8017a60632f9e2931da609d1392ee3faf440054f7ffab391308aa9431b250150b6f9042120d6e4816027c123077f17442e3c69b37118f1f118964aabeaff089214b7112795237d2d5e25b930f4aa6a86bf19ca28a0a03494e5d37e823e4cb497d5acd0249f974a3ecb3cf8200205bf45c5a156e67bc6d129af742baa7d36b98ece2db6d37e3a2a7dbb253b596e22aff2149fb429b943f0b7e9b8acc61970c679c7ab8ff4bce6eafc98ed6fd5650f8841f2abbac676153a514c18e35e9db59e4202f8d6217866f6c35c493e331f45c4a78a36e105ee7ffc61c10fb352557660b43553904da1a094dd6eb5629af2858825b9044e40a35a781cb5b3eed3e920a6f11616393a367226a1b8b84d2f631891e5c90daafe8f7939928c8fdd54abe75982935db4f48b5b3c605c9de190a8decbfc7933c2f00a412c199e5a1aeaae1e73b559d8d0b80af3ead54a7f588e7b743a003000000f11f9d942fefec19904c06d61a22ac2d55b5593f8e9c06181a539341440e012134fc39e82db48a63535ad52e9c50231d23e2c89a85570eb6df8879202aae85095cc3aece667347f1b16e70ec2ac6be5c69304d0b219ff345f8cd36bd9f3871f4ced1e31e4a3199d88d896562c32016763df037b2f2445b2c2c60c04f40d4af748841ad6ea9dd9d730d601d87d734979518dd9fe1604f45bb09099e2e9f387ecddf4bfd656f5acfa975096291107ad200d756dd64c86633656fef4fe95d7d7e35f0839b22a1a516597eac554797562fe37cfe78d5b672b1ebb955589b4e4fd16b366023c27605a50f35605b7ed64782bdee93d5c37a5963ff209fb161b0cfa6226e48b0b80db8d694b11991a33ef4c224eda1649de826ee9852a354b06b4bd4fc436025e982a1aa756031550f547485f39677df008365c61a8364e33ad85aff14a6442d3aadfea94689b56bd5b33af92bb2c7b54a71f07e4b3affcca7d54eaa89a5e68b1a0e6b9868e9e58106409f59cce82a2cf88db2ed07ea2881a71d6bf3820e2ad212202a27fdd407121305d7b7da74aa8aa9b04572dd7e8cfba85338cba4fcb55758e0ac1db46ad297742cf589cc86c63e707751fe76b912d6bc234e8acaf1c7f9562ce4f8856ac7dfeda3d2a5b4e2cc8f72da8069260a32008c16209abd517dbcae95132d56e76719c4341916609bf18854ab8540adf9adcc2f55378de2b60e1a2b8df39615a01fb846a2922a0ec2c21463498a90b2cc44928accc63b37ed3419a4ab1c803b8c65e6fb3957c83c7ee6469a1cb1f7272ab260bab4034cf11da391a38597a93878e6251371fb6a9f38d866667fc4e5f282e1a38791fdcd564d04e9e8ea4b4f5ce43a5d0a0f9741d6e7ca817b003eff2619b71583b3bb7c27c51441c18ec922135aad18164061c01df840881764d7c4586a2fe107864e273dc18ae1139d2379f11cf836244cee78266e119434d449c078f8d4f21681a19037ad9de95848351dc1eaacae49acb3ec8e11dd70931d1baa78ae220c190392f4f5b77b04fa1b2ed7d0e7cf7399763d2194851451c672b30eb736add50400b84500d46f5633f783a51c547c76a45e9a1ef231e11b03e4d0fbdd06531eb592e1136c40414a53cc26b254715aeb09791b83ce4363fd20aa9556f1fe17d1b58eaf638bceb8b2d07cd4b99e30586fef145ecbc765264e92196d6cb2d249243310accb4f087e88d5c8759eff3bb73739ab8e719541c70ed58bafed440b29f65db2ecf241329f7dbe6163e8a8ba618ae3e4118c7b399a345805a82297bf743299a545fb2f78f7552f5b9211725714756bbcf123db78bbb693db526deae29b43712419964d74199a3a1b5f64cfe4903cdbfb02a8d1d6066ad283752dab73d7b399712e5b09f9055f7fbdf02ecba2d520e12116a6f9cc6e5579a5a6d788165aadf12572e574cc50b84e7bca0cef6353613fa0d52c71f55ee6a7326e3cb7f210a0c42e298be6ec870efffb693bc2bdf3f6f05a47c3dffcb21bcbbcf330e554fe710ba3366c008bf1f8104d007cbe0bc34beacbee4b5414226438112ace676a5fada77df714d9e190b341292f0d8c6b19ecb65d1f6f8e636bc813657b42e291c684fd74e27ca5aee6722a56c63c532b07624d25ef6ad888cdbb2fb5888e9b0875158d30d62e2f0cdd20cc013d2109bcd3e52e03447dd495df7719144d15f215dea67238133f28c460a501e33737a848ecaadab3fa0061cfef19d93941791be46744f75822c7bd12979434f596cfdbc38918155ac74c534a811cc456824898fa83dca72f48546883ad82f39c1f98f4804c7ef9e09e98548661848c983c4304c3566ae3e1310cda0fdfb62fdc50302663a15a4c781ab79dc35d1b2b1ba6e2eae5c90dfa834e3c7b5a00ad37f994c417b5c798e748c4caf214ddb86bc45cb8b26be09189a210ef1fc46a565bbbb64622e4e1040c419bea46bbfc949812240d14df89cf7e98708bb0cfaebf943918cfb43d7dcffd19f7b1c008ab061cbfadb83b6afcbcf1fd887b39913b9e38036f26bff478652aecfb9d93555a703a396ef0f453e106f5dace9486521eb4408eb34d50aa4c185101a9a880f0d23531b1d07c43d23f495dc7a53c33004cad7a3d22e9347c6f4a2808e49d015747f09add182e8e4ff623bd5a55f6c44b9fb0785768f59fac70ee99995324cc2339415d460a0a7a90c3bea21377ec0c6e219ba0ecfc0b2795ff3165e58902e3e17ab239a40afba3fd163bcb7bd424b0a223dcd81b4a7184c006aa2e10294809e9b07a53ded11cda7262b9bd5a2e399742cd2b3335d14b1c06cd20325fcf82e47daa1288caf76d393384a53235cd81d6cec9fc8f024ee7ca08d57a2ac55b508863eb797b886afe23b2ae88723485f73cb201bc541d3c6bc3feb6e788e048dd8f5bf573af62d2d6911ea21fe22101d57f24099c996a47fb5b0e3f9764144a5df8f21b311abbd195df162f4a8c337e4e576762fd8bf8ee23a74a358c6e4d327ec501bb7b6303ccbef1a992fc7aff3714aade7814f1d7fe21eb6134242602d82a8ba4c3b9c5c66c5b0a7e52e327acd87ce82cc83b25947db253663b9e719d13d8bbfc88fbd4e16518ef8ed9f78988ad46157b76aea8d073e6bf2d162b9593c7286e32bfe8335b63e26c089dadda776491cbb66ba3167376c69c27f05c9a5cf283bff8c75ac37078d50e7271b001636caa91c434daefd8fa1dd1db8dd11e4ded6a4534e9f51836e438cc9316d0fd7901d6ab89112273104c81b3ea4a96d137fe780c196a6c81b1d5efd7a48f3f8a99cf67a2fab1512e65a9f5ba7222ae617e0c47917cb8a1afbd775cdae4ddbd2fd5a0fb2ca6b1b06b338a85d35ce52c6384e53e56026d7fbc38b0298ea3062689f7c86b0f009ff47fd22a8bb2690fbde9769ccb6a054fb24d60c7f374cc6829fff5965e7caa5803477814bd065796a4e4d054596cbb62faedf511c08592af986616da47d808aa0239f7cb88955ed902006e26af9e5d6b108bc0ff0235b650d385eb8a8c740de3373f9b50038fdcf637462d9b31b505f8c9e9207ef05760e5936f1149fff1e1936746c07b9f6b0ea4d7968b664f8b0c776d7efad49e1be716594cf3719d0d6910c11062a768f9d23e44e027c10ac05b036501442c26f416a408f0ff7096bada449ea152fcf2f5a4c4c19f5a1bb4e54d0c3a1b25d3e3283e1855e42f00e2155b7848a3fda44264b05f08838b25285e171f2d38d531ad3781e55861e97c21f157bfc29df8a47428448b8f06d1d558c704744f5751a9bbaa5489f1dfea4c1cef73a1e81d945b2301b464cd3e4a528e5197db72be190ef4d335a123d8621fabc0cfb8eef2db19b80bba1f1de698959f4894840d0605b5bc43285b53013783d08e16715de88ae2ea636ada77d55d15163037c6a9fdabf75a81e2bf1de31ea9845e7e411d5d673ed15692fe563083e905fb79dc6849acd86b2e44052e5f44d17bcb02ba1f3df2e094cc3113acec131bdfd0cc51431d74451470967f18bc45b98dc12cfe19d8770bc84de4723e64e383308e8234080e1a280b656755c5250b04ad791927fb131543a4beb61037a2d1994516fe50917e873671d67a805c818562d0b16f3a923d8457e4988217b68f6061893b5bc4417373e77b18b7841528d63977527955a2b50146642ecd03eb6feb31dd98a71550a694f13608df7194a2de457f34034847a5499ee150b96104a7bda175ae2e4f7527a305a85c11e0a815ae04a5a0e78904e03091672653e544ca9e03edd5ddc9bebeb07d57b7cc94da6c6cbc92c0883b0e221168fdb21886a4ee38771640c0782e136f275864062b646d0acac20da57c155f14466ec90747059c85f470d8361246e03cf4164a1d059997779f8fedb30391df6d78d5f067cdc64657776e92baf5e83a576862293377e14faee2741121e97bc889b99319093eec508b5b90b9f086a6f6e8b45e8cd50f5c2a146fa7af27c061f325f02f4314bf61834390232cb5d53cd76aab4bfb3d8a08b600f61b6380fa65932f65dd20dd79246f438a1ec45fb371c888e46fa34622e71a6fce473811efb94e4ad755e667e7f520c807a3965430801cd7f7d5633611c3ed24de92cd6ef0ec6ecb172dede7a0e77aea07cba91537e0558aeb3bbcb044c42f16baf26177c6e65319d37f0b1b99d224befa0d2a9cfbfa2730053c32543b5e070de438e6f9ae6a0a2d283212832411fd03aa125792b3821b14d08a96255b483d1f5682874993fad0c22758802594daf7ad8dcfc7b45c013dd6c8fab7b085b1e5f0dcd5ecd3d8534f0d29bff5278aa86539b3deeeee8a3327a1f5e7d81f379d31220626927410c499d67c808fa081fc6f46f43f73006bddd6393961c6c32d7ba73cd0524f2bceadb4e333f92f6d7befeb3930849e98880880bc7bca4476a29e2f73f10338ec5bc7870b2da325b37ec5b8b4b5e54689a26d4184bcadd067c3697a8299b913d1e76e0573bc90577beca1234fad1aee92af635f564730e471fcc9bdb3615944ffb7ece19cee1a08bf9bb4af61f4539a77c86c7b4450db5e7db03cb06a3d2f1072e3a143c51256f69458e31ba8839266356ed60e0fd58544f32c39c001a84bfae09693b2ac7cf7dd7b6a25e7400d2c60500852ab4e19de2414000047b43f4d5802c27e12a6d47a123e5473e95c061c956402ebc277668dc5208cf8b22ffcc1836b04e9476e0fbfee1f25d4232593df5ca5baf0018eedc79e953a18730ed6e1f376924b4a4e0e2ac8948a73d31eab630c441309051c465c2ca74fcb9dceae42a688135192395094d38362f3298b04aaf4bf9251af3b69ba78340fa8da275b640c07ea969332b400c290c847ac0aa6c56ee90dbed9b1bfb7cde283a2a1196b109ae8f743d3c433670d5d966c0d48d226b9f8708075c60c91612ba6b6247ea82c648a3016b7539a36424672d004b80ed48441f2ff783b9b768c08574607fa3b51015621dca1263cc26de5daa623c7cc526031c0ec1d9ee839a72240993ca2336ea326375b6b7ecd24fabee724bf41c26aea53fceaaf18e206ce4d9c5b81ce95ec1544cf0c19ebaa7810e9328afb5d41535336ed1ffe18f8a5e4496862f47aa81a28"}}}, 0xfce) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32, @ANYBLOB="402000000000000014001a80100004800c000a8008000300"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0045b0f, 0x0) executing program 4: syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) r0 = syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xcabb7aab17d1f79d) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a092226"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) executing program 5: r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_ep_read(r2, 0xa, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x108, &(0x7f0000001500)=ANY=[@ANYBLOB="0201"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) executing program 6: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x7ffd, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x19}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x7, 0x1, 0x6, 0x7], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7b, 0x2, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcccc, 0x7, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0xb, {0x7, 0x25, 0x1, 0xc, 0xe5, 0x4}}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r1, &(0x7f0000000200)='\x00\x00', 0x2) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 21, 3, 7, 9, 22, 12, 2, 2, 7, 13, 11, 5, 2] detailed listing: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100000001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0) write$hidraw(r1, &(0x7f0000000000)="fda09ba19d819cab390880691a749c5943b926f11c497f67d671d9a5809cf347ea56676f69e28f24e7df6335546f09da44da0a7b477e137e88fe4dc095cfe3f791ce7b4f583c50ea58c64c3b7a3d2413faf93738bd24dc97", 0x58) executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4"], 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) executing program 6: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x100, 0x39, 0xfc, 0xd, 0x10, 0xace, 0x2011, 0x426c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x6, 0x80, 0x7, "", [{{0x9, 0x4, 0xa1, 0x3c, 0x2, 0x94, 0x55, 0xb3, 0x6, [], [{{0x9, 0x5, 0xb, 0x1e, 0x28, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x238, 0x3, 0x0, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) executing program 2: syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x4002) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)=""/184) executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) get_robust_list(0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) shutdown(r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) executing program 4: syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8000, 0xff, 0x1, {0x22, 0xfdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000008) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: the chunk can be dropped bisect: split chunks (needed=true): <14> bisect: split chunk #0 of len 14 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 7, 13, 11, 5, 2] detailed listing: executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) executing program 4: syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8000, 0xff, 0x1, {0x22, 0xfdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000008) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5, 2] detailed listing: executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000008) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 7, 13] detailed listing: executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) executing program 4: syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8000, 0xff, 0x1, {0x22, 0xfdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 13] detailed listing: executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8000, 0xff, 0x1, {0x22, 0xfdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect_ath9k-read$char_usb detailed listing: executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 6: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect_ath9k-read$char_usb detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class bisect: concatenation succeeded found reproducer with 13 syscalls minimizing guilty program testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_connect_ath9k detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m45.082780654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m45.082780654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 1h11m8.720829897s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff888105910538 (size 8): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 8 bytes): 00 d7 82 13 81 88 ff ff ........ backtrace (crc 1eb9ecd3): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1741 msi2500_probe+0x2f7/0x3a0 drivers/media/usb/msi2500/msi2500.c:1263 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff888113989a00 (size 256): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 32 bytes): 58 c7 22 12 81 88 ff ff 58 c7 22 12 81 88 ff ff X.".....X."..... 10 9a 98 13 81 88 ff ff 10 9a 98 13 81 88 ff ff ................ backtrace (crc 295fa97b): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_new+0x2bb/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2152 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 BUG: memory leak unreferenced object 0xffff8881165ffb00 (size 64): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 32 bytes): 40 fa 5f 16 81 88 ff ff 68 c7 22 12 81 88 ff ff @._.....h."..... 00 00 00 00 00 00 00 00 00 9a 98 13 81 88 ff ff ................ backtrace (crc 174e250f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_new+0x69e/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2235 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 BUG: memory leak unreferenced object 0xffff8881165ffa40 (size 64): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 32 bytes): 80 08 50 15 81 88 ff ff 00 fb 5f 16 81 88 ff ff ..P......._..... 00 fb 5f 16 81 88 ff ff 00 09 cc 14 81 88 ff ff .._............. backtrace (crc b9cd9e11): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff888105910538 (size 8): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 8 bytes): 00 d7 82 13 81 88 ff ff ........ backtrace (crc 1eb9ecd3): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1741 msi2500_probe+0x2f7/0x3a0 drivers/media/usb/msi2500/msi2500.c:1263 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff888113989a00 (size 256): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 32 bytes): 58 c7 22 12 81 88 ff ff 58 c7 22 12 81 88 ff ff X.".....X."..... 10 9a 98 13 81 88 ff ff 10 9a 98 13 81 88 ff ff ................ backtrace (crc 295fa97b): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_new+0x2bb/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2152 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 BUG: memory leak unreferenced object 0xffff8881165ffb00 (size 64): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 32 bytes): 40 fa 5f 16 81 88 ff ff 68 c7 22 12 81 88 ff ff @._.....h."..... 00 00 00 00 00 00 00 00 00 9a 98 13 81 88 ff ff ................ backtrace (crc 174e250f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_new+0x69e/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2235 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 BUG: memory leak unreferenced object 0xffff8881165ffa40 (size 64): comm "kworker/1:4", pid 5700, jiffies 4294942319 hex dump (first 32 bytes): 80 08 50 15 81 88 ff ff 00 fb 5f 16 81 88 ff ff ..P......._..... 00 fb 5f 16 81 88 ff ff 00 09 cc 14 81 88 ff ff .._............. backtrace (crc b9cd9e11): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF